Weekly Threat Landscape Digest – Week 50
This week’s threat landscape (Week 45) reflects the ongoing evolution of attacker tactics toward greater precision, automation, and persistence. Adversaries […]
Weekly Threat Landscape Digest – Week 49
This week’s threat landscape (Week 49) shows a sharp rise in newly disclosed vulnerabilities, more capable malware, and increasingly sophisticated […]
Weekly Threat Landscape Digest – Week 48
This week’s threat landscape (Week 48) reveals a surge in newly reported vulnerabilities, enhanced malware capabilities, and increasingly refined social-engineering […]
Weekly Threat Landscape Digest – Week 47
This week’s cyber landscape brings a mix of new vulnerabilities, evolving malware campaigns, and increasingly sophisticated social-engineering tactics. From zero-day […]
Weekly Threat Landscape Digest – Week 46
This week’s threat landscape (Week 46) highlights the continued shift toward highly adaptive, stealth-driven attack techniques, with adversaries focusing on […]
Weekly Threat Landscape Digest – Week 45
This week’s threat landscape (Week 45) reflects the ongoing evolution of attacker tactics toward greater precision, automation, and persistence. Adversaries […]
Weekly Threat Landscape Digest – Week 44
This week’s threat landscape highlights the evolving sophistication of threat actors, who are increasingly targeting newly disclosed and unpatched vulnerabilities. […]
Behind MuddyWater’s Phoenix v4: The Malware Toolkit Compromising Global Entities
The Iran-linked Advanced Persistent Threat group MuddyWater has launched an aggressive phishing operation that compromised over 100 government entities and […]
Weekly Threat Landscape Digest – Week 43
This week’s threat landscape highlights the evolving sophistication of threat actors, who are increasingly targeting newly disclosed and unpatched vulnerabilities. […]
Weekly Threat Landscape Digest – Week 42
This week’s threat landscape (Week 42) reflects sustained adversary focus on speed, stealth, and operational resilience. Attackers continue to favor […]
Weekly Threat Landscape Digest – Week 41
This week’s threat landscape (Week 41) reflects a surge in targeted exploitation of critical infrastructure software and cloud-based platforms, underscoring […]
CVE-2025-61882 Oracle E-Business Suite Zero-Day Under Active Exploitation
Oracle has issued an emergency security alert for CVE-2025-61882, a critical vulnerability in Oracle E-Business Suite (EBS) with active exploitation […]
Weekly Threat Landscape Digest – Week 40
This week’s threat landscape (Week 40) highlights the continued evolution of adversaries who are combining technical exploits with social engineering […]
Weekly Threat Landscape Digest – Week 39
This week’s threat landscape (Week 39) reflects the growing sophistication of adversaries who are rapidly blending technical exploits with social […]
Weekly Threat Landscape Digest – Week 38
This week’s threat environment highlights how adversaries are rapidly weaponizing both newly revealed vulnerabilities and lingering security gaps, often reinforced […]
Weekly Threat Landscape Digest – Week 37
This week’s threat landscape highlights the evolving sophistication of threat actors, who are increasingly targeting newly disclosed and unpatched vulnerabilities. […]
Detecting ADCS Privilege Escalation: How Misconfigured Certificates Expose Active Directory
Active Directory Certificate Services (AD CS) is Microsoft’s system for managing digital certificates in enterprise networks. It provides encryption, digital […]
Weekly Threat Landscape Digest – Week 36
This week’s threat landscape underscores how attackers continue to blend newly disclosed flaws with well-known weaknesses and supply chain exposures. […]
Harvesting Browser Credentials: The DPAPI Exploitation Threat
Credential harvesting techniques have shifted dramatically as security controls improve around traditional attack vectors. While organizations invest heavily in protecting […]
Weekly Threat Landscape Digest – Week 35
This week’s cyber threat landscape highlights the convergence of fresh vulnerability disclosures, ongoing exploitation of unpatched systems, and the creative […]
Weekly Threat Landscape Digest – Week 34
This week’s cybersecurity landscape underscores an increasingly dynamic threat environment, marked by newly disclosed vulnerabilities, the active exploitation of existing […]
Critical FortiSIEM Vulnerability: CVE-2025-25256 Exploited in the Wild
Security teams worldwide are scrambling to address a critical vulnerability in Fortinet’s FortiSIEM platform that has already been exploited by […]
Active Directory PKI Abuse: Detecting Privilege Escalation Through ADCS
Active Directory Certificate Services (ADCS) serves as the backbone for Public Key Infrastructure (PKI) in enterprise environments, managing digital certificates […]
Weekly Threat Landscape Digest – Week 33
This week’s cybersecurity landscape highlights a dynamic threat environment characterized by newly disclosed vulnerabilities, active exploitation of known flaws, and […]