Threat Intelligence & Research

Researchers disclosed factory-installed backdoor in Zbtlink routers enabling unauthenticated root shells and persistent beaconing.

Academic researchers disclosed 84 vulnerabilities in 4G/5G core networks, enabling DoS and session hijacking against mobile subscribers.

Amazon attributes debug and chalk npm package hijacks to North Korea-linked actors who pushed wallet-draining scripts into popular packages.

Researchers found 24,650 internet-exposed BMC/IPMI interfaces disclosing password-derived hashes before login, enabling offline cracking.

Researchers published Redis authenticated RCE PoCs for multiple versions, prompting emergency Redis security releases.

Bit2Watt research shows GPU workloads by cloud tenants can oscillate data-center power draw, threatening grid stability without code exploits.

NCSC and partners attribute a novel zero-click phishing campaign to Russian state-supported actors targeting Western organizations.

Sygnia analysis shows agentic AI compressed cloud intrusion timelines to 72 hours, emphasizing speed and orchestration risk.

Researchers detail GodDamn ransomware's use of a signed PoisonX kernel driver to disable security tools and evade detection.

Researchers report JadePuffer, an agentic ransomware automating attack steps and accelerating operations.

Law enforcement in the MENA region arrested hundreds in a cross-border cybercrime crackdown; review regional threat posture and indicators of compromise.

Flawed Entra ID role could enable privilege escalation; Microsoft issued patches after discovery by researchers.