Related Threat Clusters
-
Exploitation of Critical VMware vCenter Server Bug CVE-2024-37079
A critical vulnerability in VMware vCenter Server, tracked as CVE-2024-37079, is being actively exploited more than a year after Broadcom issued a patch. This out-of-bounds write flaw in the DCERPC protocol has a CVSS…
2 articles · Updated January 23, 2026 -
Singapore Telcos Targeted by UNC3886 Cyberattack
In July 2025, an advanced persistent threat actor known as UNC3886 targeted Singapore's four telecommunications companies, compromising critical infrastructure. The attack was detected by the Infocomm Media Development…
78 articles · Updated February 9, 2026 -
Fortinet Confirms Exploitation of FortiCloud SSO Bypass Vulnerability
Fortinet has confirmed that attackers are actively exploiting a vulnerability in FortiCloud's single sign-on (SSO) authentication, affecting even fully patched devices. The exploitation allows unauthorized access, with…
35 articles · Updated January 23, 2026 -
Malicious VS Code AI Extensions Compromise 1.5 Million Users
Malicious AI extensions for Microsoft Visual Studio Code have been identified, affecting over 1.5 million users by stealing developer source code. The extensions, which were widely installed, pose a significant risk to…
2 articles · Updated January 26, 2026 -
CISA Confirms Active Exploitation of VMware ESXi CVE-2025-22225
CISA has confirmed the active exploitation of a critical vulnerability in VMware ESXi, tracked as CVE-2025-22225. This zero-day flaw allows attackers to escape security sandboxes and is currently being used in…
7 articles · Updated February 5, 2026
Recent Intelligence Reports
- Chinese cyberspies breach Singapore's four largest telcos — Bleepingcomputer · February 9, 2026
- CISA: Ransomware intrusions exploiting VMware ESXi bug ongoing — Scworld · February 6, 2026
- CISA: VMware ESXi flaw now exploited in ransomware attacks — Bleepingcomputer · February 4, 2026
- U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog — Securityaffairs.Co · January 28, 2026
- Malicious Microsoft VSCode AI extensions might have hit over 1.5 million users — Cybersecurity-Review · January 26, 2026
- Patch or die: VMware vCenter Server bug fixed in 2024 under attack today — Theregister · January 23, 2026