Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
A new ClickFix variant uses browser cache smuggling to bypass Windows Run dialog character limits and deploy in-memory .NET credential stealers.
Qilin and INC ransomware groups are exploiting CVE-2026-0257 in PAN-OS to bypass MFA and pivot into VMware virtualization environments for offline credential dumping.
A critical 9.3 CVSS vulnerability in Signal's RingRTC library allows an attacker to saturate the call state machine event queue, keeping the microphone and camera active after a user hangs up.
