Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Critical Unpatched Citrix NetScaler RCE Zero-Days Exploited

Critical Unpatched Citrix NetScaler RCE Zero-Days Exploited

Unauthenticated remote code execution vulnerabilities in Citrix NetScaler ADC and Gateway are being actively exploited in the wild to deploy webshells and steal credentials.

Vikas Lokhande@vlokhande10 days ago

3 intel reports

Three Threat Groups Target Russian Enterprises with Backdoors

Russian enterprises are facing sophisticated multi-stage attacks from NightEagle, Hacking Cat, and Toy Ghouls involving custom backdoors, wipers, and tunneling tools.

avatar
Arnold Chan@slaz
23 days ago
9
TA488 Exploits Outlook XSS via OWAReaper Malware

Russia-aligned actor TA488 is leveraging a critical XSS vulnerability in Outlook Web Access to deploy OWAReaper, a sophisticated browser-based implant for persistent mailbox access.

avatar
Ethan Andrews@eandrews
2 months ago
22
Microsoft Exchange OWA Zero-Day CVE-2026-42897 Analysis

Adversaries are exploiting a critical unauthenticated spoofing vulnerability (CVE-2026-42897) in Microsoft Exchange Server to execute arbitrary JavaScript within OWA browser contexts.

avatar
Tim Peck@timpeck
5 months ago
1,765