Related Threat Clusters
-
Qinglong Task Scheduler Vulnerabilities Exploited for Cryptomining Attacks
In early February 2026, hackers exploited two critical authentication bypass vulnerabilities in the Qinglong task scheduling platform, affecting versions 2.20.1 and earlier. These vulnerabilities, identified as…
6 articles · Updated April 29, 2026 -
Vect and TeamPCP Form Alliance for Ransomware Operations
In late March 2026, the Vect ransomware group partnered with TeamPCP, a credential theft specialist, to enhance their cybercriminal operations. This collaboration aims to leverage TeamPCP's extensive credential…
8 articles · Updated July 2, 2026 -
Operation PCPcat Compromises Over 59,000 Next.js/React Servers
Operation PCPcat has compromised 59,128 Next.js and React servers in under 48 hours, exploiting critical vulnerabilities CVE-2025-29927 and CVE-2025-66478. The attackers utilized prototype pollution in JSON payloads to…
3 articles · Updated December 24, 2025 -
PCPcat Malware Compromises Over 59,000 Servers via React2Shell Exploit
The PCPcat malware campaign has compromised more than 59,000 servers in under 48 hours by exploiting critical vulnerabilities in .js and React frameworks. It specifically targets vulnerabilities CVE-2025-29927 and…
2 articles · Updated December 15, 2025 -
Vulnerabilities in IBM QRadar SIEM Expose Systems to Attacks
IBM QRadar SIEM has eleven known vulnerabilities that can be exploited by attackers, potentially turning the security solution into an entry point for further attacks if not patched. The vulnerabilities include…
2 articles · Updated March 3, 2026
Recent Intelligence Reports
- Weekly Threat Bulletin February 11th 2026 — www.f5.com · July 2, 2026
- Snyk researchers explain — snyk.io · April 29, 2026
- Security Bulletin: Components with known vulnerabilities in IBM QRadar Pre — Ibm · March 3, 2026
- Operation PCPcat Hacked 59,000+ Next.js/React Servers Within 48 Hours — Cybersecuritynews · December 24, 2025
- New PCPcat Exploiting React2Shell Vulnerability to compromise 59,000+ Servers — Cybersecuritynews · December 15, 2025