Login Subscribe

Vulnerabilities & Exploits

Public Hacking Tools Flood the Threat Landscape, Raising Defense Stakes

The Cybersecurity and Infrastructure Security Agency (CISA) released an advisory highlighting a sharp rise in freely available hacking utilities that have surfaced in cyber‑attacks worldwide. From turnkey ransomware encryptors to ready‑made credential‑harvesting scripts, these tools are being uploaded to public forums, code‑sharing sites, and underground marketplaces,

Amaranth-Dragon Leverages CVE-2025-8088 to Target SE Asian Critical Infrastructure

Check Point’s threat‑intel team uncovered a new operation by the Amaranth‑Dragon group, an offshoot of APT‑41, that weaponized the freshly disclosed CVE‑2025‑8088. The actors compromised software vendors in the region’s supply chain, inserting a malicious payload that exploits the vulnerability during the update

VMware Unveils vDefend: Zero‑Trust Micro‑Segmentation for Hybrid Cloud

VMware Unveils vDefend: Zero‑Trust Micro‑Segmentation for Hybrid Cloud

VMware’s security team announced the vDefend framework, a set of built‑in controls that bring zero‑trust principles to private‑cloud environments. vDefend automatically applies micro‑segmentation, continuous identity verification, and real‑time threat analytics to workloads running on‑premises, in VMware Cloud on AWS, and across other public

CrowdStrike’s Falcon Wins Gartner Customers’ Choice for External Attack Surface Management

CrowdStrike’s Falcon Wins Gartner Customers’ Choice for External Attack Surface Management

CrowdStrike’s Falcon platform has been named the exclusive Gartner Customers’ Choice for External Attack Surface Management (EASM). The award is based on real‑world feedback from verified Gartner customers who evaluated solutions on criteria such as discovery accuracy, prioritization of risk, and remediation effectiveness. Falcon’s win signals that

CISA Flags Public Hacking Tools Seen in Recent Breaches

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory that catalogs dozens of publicly available hacking utilities identified in recent cyber incidents. The list spans credential dumpers, password‑spraying scripts, automated network scanners, ransomware loaders, and other open‑source frameworks that attackers are repurposing to breach organizations. The

Shadow Campaigns: New Espionage Ops Exploit Hundreds of CVEs for Persistent Access

Shadow Campaigns: New Espionage Ops Exploit Hundreds of CVEs for Persistent Access

Unit42’s latest research uncovered a coordinated set of espionage operations, labeled “Shadow Campaigns,” that systematically abuse a broad spectrum of known software vulnerabilities—including dozens of high‑severity CVEs—across Windows, Linux, and network devices. The attackers chain these exploits to establish footholds, move laterally, and maintain long‑term

GreyNoise Adds Vendor CVE & Tag Spike Feeds for Rapid Threat Detection

GreyNoise Adds Vendor CVE & Tag Spike Feeds for Rapid Threat Detection

GreyNoise has released two new event streams—Vendor CVE Spike and Tag Spike—that automatically flag sudden surges in Internet‑wide traffic targeting freshly disclosed vulnerabilities. The feeds pull data from GreyNoise’s global sensor network, correlate it with vendor‑specific CVE identifiers and custom tags, and surface spikes that

CrowdStrike Boosts Linux Web‑Shell Detection with Real‑Time AI Threat Hunting

CrowdStrike Boosts Linux Web‑Shell Detection with Real‑Time AI Threat Hunting

CrowdStrike’s latest Falcon update adds dedicated modules that continuously monitor script execution on Linux hosts. By applying AI‑driven behavior analysis, the platform can spot the characteristic file reads, command injections, and network callbacks of modern web‑shells as they happen, flagging them before an attacker establishes persistence. For