Real-time Actionable Vulnerability Intelligence

April 1, 2026

WhatsApp-based malware campaign exploits VBS scripts to deploy multi-stage attacks

The campaign combines social engineering with “living-off-the-land” techniques.

2 min read

April 1, 2026

Google patches Chrome zero-day flaw

Google didn’t disclose any additional details regarding the nature of exploitation.

1 min read

April 1, 2026

Cisco suffers breach linked to Trivy supply-chain compromise

As part of the breach, multiple AWS access keys were stolen and later used for unauthorized activity across a limited number of Cisco cloud accounts.

2 min read

April 1, 2026

Zero-day in TrueConf exploited in attacks targeting Southeast Asia

Attackers leveraged the update channel of TrueConf to deliver malware, more specifically a payload linked to the Havoc C&C framework.

2 min read

March 31, 2026

Hackers compromise Axios npm package to deliver cross-platform malware

The hackers hijacked the npm account of the library's developer and inserted a malicious dependency into the package configuration.

4 min read