Pre-Positioned Access: The Cyber Threat Behind the Iran Conflict

Pre-positioned access across U.S., European, and Middle Eastern networks is now being activated following Iran-related escalation. This bulletin details active intrusions, threat actors, and immediate defensive actions.

Learn More

March 25, 2025

By Bruce Skillern

GitHub Action Supply Chain Attack; reviewdog/action-setup

March 20, 2025

By Rodrigo Luna

Remote Code Execution with Partial PUT on Apache Tomcat Instances

March 20, 2025

By Daniel Rogers

QakBot’s Modular Architecture and Evasion Techniques

March 11, 2025

By Aileen Ward

Apache Camel Message Header Injection via Improper Filtering

March 7, 2025

By Matthew Sparrow

Arbitrary Command Execution in Kibana

March 6, 2025

By Anna Balabusko

Zero-Day Vulnerabilities in VMware ESXi, Workstation and Fusion

February 20, 2025

By Anna Balabushko

Authentication Bypass Vulnerability in Palo Alto PAN-OS Management Interface

February 18, 2025

By Daniel Rogers

Rha-Rha-Rhadamanthys Stealer Expands Credential Theft And Persistence

February 14, 2025

By Daniel Rogers

Lumma Stealer Distributed Through Fake Reddit Domains

1 2 3 4 5 6