Latest APT activity, actively exploited CVEs, and curated threat intelligence sources.
UAT-9686 is actively exploiting a maximum-severity vulnerability in Cisco Secure Email Gateway and Web Manager.
CISA, NSA and Canadian CCCS released updated IOCs for BRICKSTORM, a sophisticated backdoor targeting VMware vSphere environments.
MuddyWater leverages custom Fooder loader to deploy MuddyViper backdoor, enabling system recon, shell command execution, and file transfer.
Chinese state-sponsored group Salt Typhoon maintains access to US telecommunications providers. Focus on metadata collection and call interception.