Node2Shell: Node.js Brotli Remote Code Execution Vulnerability
A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
OrbitalVoyage is an Android RAT distributed via a TikTok-themed dropper that uses a VPN black-hole technique to disable security cloud checks during installation.
Indonesian threat actors are deploying Mantax Otax, a hybrid Android malware that combines AES-256 ransomware with extensive spyware capabilities to extort victims through double extortion.
APT36 uses the Ghazwa spyware variant to conduct comprehensive surveillance on Android devices through media projection, audio recording, and extensive data exfiltration.