Volt Typhoon's Silent Train: Unmasking a Covert Zero-Day Exploitation Network
Volt Typhoon's Silent Train, a China-nexus covert network, used rotating compromised SOHO/IoT infrastructure for four zero-day campaigns and strategic access.
Critical Alert: Microsoft Patch Tuesday Fixes Windows Zero-Day Under Active Attack Amidst Record 1,413 Vulnerabilities
Microsoft's October Patch Tuesday addresses 1,413 vulnerabilities, including a Windows zero-day under active exploitation and two others. Immediate patching is critical.
Citrix NetScaler Zero-Day: Unmasking Three Weeks of Undetected State-Sponsored Exploitation
Mandiant reveals critical Citrix NetScaler zero-day exploited for weeks by state-sponsored groups, impacting dozens of organizations.
INC Ransomware's Assertive Zero-Day Offensive: Deconstructing the SonicWall Exploitation Chain
Technical deep dive into INC ransomware's assertive exploitation of SonicWall zero-days for data theft and encryption, detailing TTPs and mitigation.
Critical Breaches Unpacked: Axios npm Supply Chain, FortiClient EMS Zero-Days, and the AI Identity Fraud Onslaught
Deep dive into Axios npm supply chain compromise, critical FortiClient EMS exploitation, and the rising threat of AI-driven identity attacks.