CYBER Threat Intelligence Reports
LATEST CTIs
ChainDrop npm Supply Chain Attack Compromises Hundreds of Packages and Steals Developer Credentials
A rapidly spreading software supply chain attack known as ChainDrop has compromised hundreds of packages in the npm ecosystem, including widely used caching libraries with…
Read more >
N-able N-central Authentication Bypass Exploitation (CVE-2026-18577)
A high-severity authentication bypass vulnerability in N-able N-central is being actively exploited to compromise remote monitoring and management servers and gain access to downstream customer…
Read more >
Cisco FMC Zero-Day CVE-2026-20316 Actively Exploited to Access Sensitive Data
Cisco has disclosed an actively exploited vulnerability in Cisco Secure Firewall software that allows unauthenticated remote attackers to gain access to affected systems using static…
Read more >
Check Point SmartConsole Authentication Bypass (CVE-2026-16232)
Check Point has released an urgent security update addressing three vulnerabilities affecting its Security Management, Multi-Domain Management, Quantum Security Gateway, and Gaia operating system products.…
Read more >
WP2Shell WordPress Core RCE Exploited in the Wild (CVE-2026-63030 and CVE-2026-60137)
WordPress administrators should urgently patch two recently disclosed Core vulnerabilities collectively known as WP2Shell. When chained together, the flaws allow an unauthenticated attacker to execute…
Read more >
AsyncAPI npm Supply-Chain Attack Delivers Cross-Platform Miasma RAT
A software supply-chain attack compromised four packages in the official AsyncAPI npm namespace, resulting in five malicious package versions being distributed through the project’s legitimate…
Read more >
