#threat-intelligence

#threat-intelligence

The ransomware ecosystem is increasingly fragmented with new smaller groups emerging alongside traditional mega-groups.

Chinese spies exploited vulnerabilities in Juniper Networks routers to gain root access and deploy backdoors.

CISA added five critical vulnerabilities to its KEV catalog, highlighting active exploitation threats.

Immediate patch application required by March 31, 2025, for federal agencies.

Lotus Panda targets various sectors in Asia using the Sagerunex backdoor, demonstrating advanced and persistent threat tactics.

ISPs in China and the US West Coast are under a coordinated exploitation campaign by unidentified threat actors stealing data and mining cryptocurrencies.

TgToxic malware continues to evolve, demonstrating the actors' ability to adapt and improve their tactics against cybersecurity efforts.