Category: Threat Intelligence
-
Today’s Topics: Chrome Extensions Found Stealing Credentials from Users Across 170+ Websites DarkSpectre Browser Extension Operation Exposed After Affecting 8.8 Million Users Across Major Browsers How can Netizen help? Chrome Extensions Found Stealing Credentials from Users Across 170+ Websites Security researchers have uncovered two malicious Google Chrome extensions masquerading as a legitimate network speed-testing tool…
-
IBM has disclosed a critical security flaw affecting its API Connect platform that could allow an attacker to bypass authentication controls and gain unauthorized access. The issue is tracked as CVE-2025-13915 and carries a CVSS v3.1 score of 9.8, placing it in the highest severity tier. The weakness falls under CWE-305, which refers to authentication…
-
Overview: Phish Tale of the Week React2Shell, One Month Later: What We Now Know One of the Largest Insurance Data Breaches of 2025: Aflac Confirms 22.65 Million Impacted How can Netizen help? Phish Tale of the Week Ofteften times phishing campaigns, created by malicious actors, target users by utilizing social engineering. For example, in this…
-
Today’s Topics: Fake PoCs and AI Noise Are Slowing Real Vulnerability Response MongoDB Vulnerability CVE-2025-14847 Is Being Actively Exploited Worldwide How can Netizen help? Fake PoCs and AI Noise Are Slowing Real Vulnerability Response The React2Shell vulnerability exposed a growing problem that many security teams are now facing: a flood of “proof-of-concept” (PoC) exploits that…
-
In October 2025, Netizen’s Security Operations Center identified five critical vulnerabilities, including CVE-2025-59287 in Microsoft WSUS and CVE-2025-61882 in Oracle E-Business Suite, posing severe threats. Urgent patching is advised to prevent exploitation, with attackers gaining unauthorized access, control, or deploying malware across networks, affecting data integrity and operational security.
-
Fortinet has issued a new advisory warning customers that CVE-2020-12812, an improper authentication flaw first disclosed in 2020, is once again being used in real-world attacks. The weakness affects FortiOS SSL VPN under specific configurations and allows users to authenticate without being prompted for a second factor simply by changing the letter case of the…
-
CVE-2025-55182, commonly referred to as React2Shell, is a critical pre-authentication remote code execution (RCE) flaw impacting React Server Components (RSC), Next.js, and related frameworks. The bug sits in the way affected versions parse and trust serialized payloads sent via the Flight protocol. With a CVSS score of 10.0, the vulnerability allows a single HTTP request…
-
Today’s Topics: Cisco AsyncOS Zero-Day Actively Exploited in Targeted Email Gateway Intrusions Threat Actors Abuse PuTTY for Lateral Movement and Quiet Data Exfiltration How can Netizen help? Cisco AsyncOS Zero-Day Actively Exploited in Targeted Email Gateway Intrusions Cisco has issued an urgent warning regarding an actively exploited, maximum-severity zero-day vulnerability affecting Cisco AsyncOS software used…
-
U.S. Customs and Border Protection is moving into a decisive phase of its quantum preparedness program as it approaches 2026. Senior leadership has framed this effort as a necessary response to long-term cryptographic risk rather than a speculative research exercise. The focus centers on protecting sensitive government data against future cryptanalytic breakthroughs tied to large-scale…
-
A rootkit is a class of post-exploitation malware built to preserve long-term, privileged access to a compromised system while actively concealing its presence. Unlike most malware families that prioritize immediate payload execution or data theft, a rootkit exists to subvert visibility itself. It alters how an operating system reports processes, files, memory, network activity, and…
