Month: February 2026

On 2026-02-13, AlienVault released a comprehensive threat report titled Multiple Threat Actors Rapidly Exploit React2Shell: A Case Study of Active Compromise. The document details how a newly disclosed vulnerability in React Server Components—named React2Shell—was turned into

Threat Overview On February 13, 2026, the security community was alerted to a critical vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) appliances. The flaw, identified as CVE-2026-1731, enables unauthenticated attackers to execute

Notepad++ is one of the most widely used source‑code editors in the world, with millions of installations across government, industry and academia. Its popularity makes it an attractive target for attackers seeking to compromise large numbers

Windows Remote Desktop Services (RDS) has become a high‑profile target for threat actors following the discovery of the critical zero‑day vulnerability CVE‑2026‑21533. The flaw allows an attacker with local access to elevate privileges to SYSTEM, effectively

Threat Overview A newly discovered kernel vulnerability in CentOS 9, disclosed by CODERED_VTA on 2026‑02‑06, presents a severe risk of local privilege escalation. The flaw resides within the Linux kernel’s networking subsystem, specifically the net‑sched cake

In early February 2026, cybersecurity researchers released a comprehensive threat report detailing a sophisticated campaign attributed to the advanced persistent threat group APT‑Q‑27, popularly known as GoldenEyeDog. The report, published by CODERED_VTA, highlights the group’s relentless

Threat Overview In early February 2026 Huntress documented a sophisticated intrusion that began with compromised SonicWall SSLVPN credentials. An attacker used these credentials to gain initial access to a target network, then deployed a custom EDR

Threat Overview On 2026-02-04, security analyst Tr1sa111 released a comprehensive threat report titled The Chrysalis Backdoor: A Deep Dive into Lotus Blossom's toolkit. With a confidence level of 100 and a reliability rating of C –

Threat Overview On 2026-02-02, the security community was alerted to a new phishing campaign that targets users of popular cloud storage services. The campaign masquerades as legitimate renewal notices, flooding inboxes with emails that appear to

Threat Overview On 29 December 2025 a coordinated wave of destructive cyber‑attacks struck the Polish energy sector, targeting over 30 wind and photovoltaic farms, a private manufacturing firm and a large combined heat and power (CHP)