CYBER Threat Intelligence Reports
LATEST CTIs
CVE-2025-41244: Chinese Threat Actors Actively Exploiting VMware Tools & Aria Vulnerability
CVE-2025-41244 (CVSS 7.8) is a local privilege escalation vulnerability in VMware Tools and VMware Aria Operations when the Service Discovery Management Pack (SDMP) is enabled.…
Read more >
CVE-2025-32463: Critical Sudo Privilege Escalation
CVE-2025-32463 is a critical local privilege escalation in the ubiquitous sudo utility. The bug allows a local user to escalate to root by abusing sudo’s…
Read more >
Cisco IOS and IOS XE SNMP Zero-Day Actively Exploited (CVE-2025-20352)
Cisco disclosed CVE-2025-20352, a stack overflow in the SNMP subsystem of IOS and IOS XE, now confirmed as actively exploited in the wild. Attackers can…
Read more >
SolarWinds Web Help Desk (WHD) Unauthenticated RCE Patch-Bypass (CVE-2025-26399)
SolarWinds released Web Help Desk 12.8.7 Hotfix 1 to fix CVE-2025-26399, an unauthenticated remote code execution flaw in the AjaxProxy component caused by unsafe deserialization.…
Read more >
SonicWall Cloud Backup Compromise & Ongoing SSLVPN Exploitation
Threat actors gained access to MySonicWall cloud backup preference files after brute-forcing the vendor’s portal. These files, although encrypted, contain sensitive configuration data such as…
Read more >
Ongoing Supply-Chain Attack Targeting npm Packages (aka “Shai-Hulud”)
Beginning on September 14, 2025, and accelerating over the next two days, attackers launched a large-scale supply-chain attack against the npm ecosystem. The campaign injected…
Read more >
