Skip to main content

Palo Alto PAN-OS GlobalProtect Command Injection Under Active Exploitation (CVE-2024-3400)

Scope: Palo Alto Networks PAN-OS (GlobalProtect Gateway)

Severity: Red

Broken VECT 2.0 Ransomware – Destructive Wiper Behavior Observed

Scope: Enterprise Endpoints and File Systems

Severity: Red

FortiOS & Atlassian Confluence Actively Exploited (CVE-2024-21762 / CVE-2023-22527)

Scope: Fortinet FortiOS/FortiProxy, Atlassian Confluence

Severity: Red

WordPress Redirect Plugin – Hidden Backdoor Discovered

Scope: WordPress (Affected Redirect Plugin)

Severity: Red

SAP NPM Supply Chain Compromise – Malicious Packages Stealing Developer Credentials

Scope: SAP NPM Packages / Developer Environments

Severity: Red

Axios npm Package Backdoored by North Korean Threat Actor (UNC1069)

Scope: JavaScript/Node.js developers, CI/CD pipelines using Axios

Citrix NetScaler ADC/Gateway — Active Exploitation (CVE-2026-3055)

Scope: Citrix NetScaler ADC & Gateway

Severity: Red

Subscribe to Advisories