Threat Intelligence

28 Articles

Threat IntelligenceSep 18, 2025·3 min read

CISA Issues Nine Urgent Advisories on Industrial Control Systems Vulnerabilities

In a critical bulletin released on September 18, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published nine new advisories detailing high-severity vulnerabilities affecti...

Threat IntelligenceSep 18, 2025·2 min read

Critical Google Chrome Zero-Day CVE-2025-10585: What You Need to Know

Google has just patched a critical zero-day vulnerability in its Chrome web browser—CVE-2025-10585—which has been actively exploited in the wild. This flaw, a type confusion issue in Chrome’s V8 Ja...

Threat IntelligenceSep 18, 2025·4 min read

Malware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems

U.S. Cybersecurity and Infrastructure Security Agency’s new Malware Analysis Report on a malicious listener deployed on Ivanti Endpoint Manager Mobile (EPMM) systems by chaining CVE-2025-4427 and C...

Threat IntelligenceJun 22, 2025·5 min read

MSSP Alert Top 250 for 2024: A Deep Dive into the State of Cybersecurity

Discover the key findings from the 2024 MSSP Alert Top 250 report. Explore trends in MSSP growth, profitability, in-house SOCs, and the critical services defining modern cyber defense.

Threat IntelligenceApr 26, 2025·4 min read

Pakistan-Linked APT36 Exploits "Pahalgam Terror Attack" Theme in Multi-Pronged Cyber Espionage Campaign Against India

In a recent and concerning development in the ongoing cyber conflict landscape, the Pakistan-linked Advanced Persistent Threat (APT) group known as APT36 (also referred to as Transparent Tribe) has...

Threat IntelligenceMar 25, 2025·10 min read

Unpacking CVE-2025-29927: A Deep Dive into the Next.js Path Traversal Vulnerability

Next.js has rapidly become a dominant force in the React ecosystem, lauded for its developer experience and performance optimizations. However, like any complex framework, it's not immune to securi...

Threat IntelligenceSep 7, 2024·6 min read

MITRE ATT&CKcon 5.0: Elevating Cybersecurity Knowledge

Cybersecurity remains at the forefront of the global conversation, and MITRE ATT&CKcon 5.0 is a pivotal event in the field. Scheduled for October 22-23, 2024, in McLean, Virginia, the conference se...

Threat IntelligenceMay 8, 2023·21 min read

MITRE ATT&CK version 13

MITRE ATT&CK version 13 has been recently launched, bringing some significant updates. These include: Key website enhancements Increased focus on cloud and Linux coverage More detailed det...

Threat IntelligenceOct 25, 2022·13 min read

ATT&CK v12 is now accessible! Revisions – October 2022

Updates to Techniques, Groups, and Software for Enterprise, Mobile, and ICS are included in the October 2022 (v12) ATT&CK release. The addition of detections to ATT&CK for ICS and the inclusion of ...

Threat IntelligenceOct 18, 2022·5 min read

Critical Fortinet auth bypass bug has an exploit available; apply the patch now

A critical authentication bypass flaw affecting Fortinet's FortiOS, FortiProxy, and FortiSwitchManager appliances now has proof-of-concept exploit code available. Attackers can get around the authe...

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.