Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
An unauthenticated attacker can bypass authentication on Cisco SD-WAN vManage devices by utilizing URL-encoded paths and internal usernames to obtain admin-level sessions.
Adversaries are deploying modular Linux implants including BPFDoor, Rekoobe, and the new AVERAT RAT against telecom edge appliances, utilizing SMTP-disguised C2 and BPF packet filtering to evade detection.
Adversaries are chaining a JWT authentication bypass with unsafe .NET type instantiation in SharePoint's Business Connectivity Services to achieve remote code execution.
