CYBER Threat Intelligence Reports
LATEST CTIs
SonicWall Cloud Backup Compromise & Ongoing SSLVPN Exploitation
Threat actors gained access to MySonicWall cloud backup preference files after brute-forcing the vendor’s portal. These files, although encrypted, contain sensitive configuration data such as…
Read more >
Ongoing Supply-Chain Attack Targeting npm Packages (aka “Shai-Hulud”)
Beginning on September 14, 2025, and accelerating over the next two days, attackers launched a large-scale supply-chain attack against the npm ecosystem. The campaign injected…
Read more >
FBI Advisory: UNC6040/UNC6395 Targeting Salesforce Environments
The FBI has issued a FLASH advisory detailing activity from the threat groups UNC6040 and UNC6395, who are actively conducting data theft and extortion campaigns…
Read more >
CVE-2024-40766: SonicWall SSL VPN Flaw Actively Exploited by Ransomware Threat Actors
CVE-2024-40766 is a critical improper access control vulnerability in SonicWall SonicOS management access/SSLVPN. Successful exploitation enables unauthorized access and can, in some cases, crash the…
Read more >
CVE-2025-54236 “SessionReaper”: Critical Flaw in Adobe Commerce & Magento
A newly disclosed flaw in Adobe Commerce and Magento Open Source, tracked as CVE-2025-54236, exposes online stores to the risk of unauthenticated account takeover. The…
Read more >
Salesforce Breach: Exposure of Support Case Data at Major Security Vendors
A large-scale supply-chain campaign has unfolded, where attackers abused OAuth tokens from Salesloft’s Drift application to infiltrate Salesforce environments. Among the confirmed victims are leading…
Read more >
