Threat Advisories
Detailed information and guidance on threats and vulnerabilities, focusing on its characteristics, impact, and remediation steps, released daily and weekly to provide actionable intelligence and aid in rapid response and mitigation efforts.
Strengthen Your Defenses With the Latest Intelligence
Threat Level – Red | Vulnerability Report
APT28 Exploits Windows Print Spooler Flaw with GooseEgg
APT28, a Russia-based threat actor, exploited a vulnerability (CVE-2022-38028) in Windows Print Spooler using April 26, 2024 Threat Level – Amber | Vulnerability Report
ToddyCat’s Toolkit and Tactics Fueling Data Theft
ToddyCat, characterized by its sophisticated tactics, has surfaced with a focus on April 25, 2024 Threat Level – Red | Vulnerability Report
Over 300k WordPress Sites Affected by Forminator Plugin Flaws
The Forminator WordPress plugin, utilized by multiple websites, is vulnerable to multiple April 24, 2024 Threat Level – Amber | Vulnerability Report
Middle East Targeted with CR4T Malware in DuneQuixote Campaign
The DuneQuixote campaign, targeting Middle Eastern governments, introduces a new backdoor dubbed April 23, 2024 Threat Level – Red | Vulnerability Report
Earth Hundun’s Deuterbear Sets Sights on High-Value Sectors
The Earth Hundun group has recently initiated a sequence of cyber intrusions April 23, 2024 Threat Level – Amber | Vulnerability Report
FIN7 Takes Aim at the U.S. Auto Industry
FIN7 has been orchestrating a spear-phishing campaign targeting the U.S. automotive sector. April 19, 2024 Threat Level – Red | Vulnerability Report
OpenMetadata Flaws Exploited for Cryptojacking on Kubernetes
Threat actors are exploiting new vulnerabilities in OpenMetadata to hijack Kubernetes workloads for April 19, 2024 Threat Level – Amber | Vulnerability Report
FatalRAT’s Calculated Cryptocurrency Carnage
FatalRAT, a Remote Access Trojan, initiated a targeted phishing campaign primarily targeting April 19, 2024