CVE-2025-33073 is a vulnerability tracked across 5 threat clusters and 9 intelligence report mentions on ThreatCluster. First observed November 7, 2025; most recent activity June 30, 2026.
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
A proof-of-concept (PoC) exploit has been released for a NTLM reflection bypass vulnerability, tracked as CVE-2026-24294, which allows attackers to gain SYSTEM-level access on Windows Server 2025. This vulnerability…
In April 2026, DigiCert experienced a breach due to a social engineering attack that compromised its tech support team. An attacker tricked two employees into executing a malicious screensaver file, leading to the theft…
On May 4, 2026, a leak of internal communications from The Gentlemen Ransomware-as-a-Service (RaaS) operation surfaced on underground forums. The leak, which included chats and backend data from November 2025 to April…
Microsoft announced plans to disable the NTLM authentication protocol by default in future Windows releases due to its security vulnerabilities that have been exploited in cyberattacks. NTLM, introduced in 1993, has…