Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck4 days ago

2 intel reports

CSuite Phishing Steals M365 Sessions and Deploys RMM

The CSuite operation targets US and European organizations using sophisticated phishing lures to steal Microsoft 365 sessions and deploy legitimate RMM tools like ScreenConnect for persistent endpoint access.

avatar
Arnold Chan@slaz
1 month ago
16
Sapphire Sleet Supply Chain and Social Engineering

Sapphire Sleet, a North Korean state actor, is targeting the cryptocurrency and IT sectors through sophisticated npm supply chain compromises and social engineering lures on professional platforms.

avatar
Ethan Andrews@eandrews
2 months ago
18