Ethan Andrews

ITScape (CVE-2026-46316) is a high-severity guest-to-host escape vulnerability in KVM/arm64's vGIC-ITS emulation caused by a race condition leading to a double-put use-after-free.

Threat actors manipulate AWS CloudTrail and Google Cloud Logging configurations to blind security teams and maintain persistent visibility within compromised environments.

Suspected MustangPanda activity features the LotusLite backdoor using Microsoft Forms spoofing for C2 and explicit hardcoded actor references.

Security researchers have demonstrated how new native AI features in Microsoft SQL Server 2025 can be weaponized for covert data exfiltration, NTLM coercion, and Command and Control (C2) transport.