CYBER Threat Intelligence Reports
LATEST CTIs
BGP Hijacking and Route Leak Disrupt Cloudflare’s 1.1.1.1 DNS Service
Cloudflare’s popular 1.1.1.1 DNS resolver service experienced disruptions on June 27, 2024, due to BGP hijacking and a route leak by Brazilian networks Eletronet and…
Read more >
Code Injection Vulnerability in MongoDB Compass (CVE-2024-6376)
A critical security vulnerability, CVE-2024-6376, has been discovered in MongoDB Compass, exposing systems to code injection risks. Due to insufficient sandbox protection in the ejson…
Read more >
Malicious npm Package “legacyreact-aws-s3-typescript” Backdoors AWS Users
A malicious npm package, "legacyreact-aws-s3-typescript," mimicking a legitimate Amazon S3 tool, was found to contain a backdoor allowing remote attackers to execute commands and gain…
Read more >
A Remote Unauthenticated Code Execution Vulnerability in OpenSSH’s server (CVE-2024-6387)
A critical Remote Unauthenticated Code Execution (RCE) vulnerability (CVE-2024-6387) in OpenSSH's server (sshd) on glibc-based Linux systems allows remote attackers to execute arbitrary code as…
Read more >
Multiple Vulnerabilities in Apache HTTP Server Demand Immediate Action (CVE-2024-36387 to CVE-2024-39573)
The Apache Software Foundation has issued an urgent advisory for multiple vulnerabilities (CVE-2024-36387 to CVE-2024-39573) in Apache HTTP Server, risking DoS attacks, remote code execution,…
Read more >
GitLab Releases Patch for CI/CD Pipeline Vulnerability (CVE-2024-5655)
GitLab has released critical security updates addressing 14 vulnerabilities, including a severe flaw (CVE-2024-5655) with a CVSS score of 9.6 that allows attackers to run…
Read more >
