Automated Attack Compromises 1.5 Million Revolve Customer Payment Details
Online retailer Revolve confirms 1.5 million customer payment details compromised in a September breach. ThreatSurface Global investigates the automated attack
12 stories
Page 1
QNAP NAS Devices Under Siege: Plex2Shell Exploitation Surges, Urgent Action Required
QNAP NAS devices running Plex Media Server are targeted by widespread Plex2Shell exploits. ThreatSurface Global details the critical RCE vulnerability and…
Critical cPanel Zero-Day Lurked for Weeks, Threatening Global Web Infrastructure
A critical cPanel zero-day (CVE-2026-41940) was exploited for over 25 days, leaving global web infrastructure vulnerable. ThreatSurface Global examines the…
Sshole Vulnerability Triggers Global SSH Scan Surge: Exploitation Attempts Spike
New data reveals a global surge in exploitation attempts targeting CVE-2026-123158, the Sshole SSH vulnerability. Urgent patching and robust defenses…
BeyondTrust Zero-Day Exploited by Chinese APT: A Global Privilege Management Alert
A Chinese APT group exploited a zero-day in BeyondTrust Privilege Management for Windows, posing a global threat to privileged access. Learn about the exploit…
Network Edge Exposed: Critical Zero-Days Imperil D-Link Enterprise Switches
Urgent alert for D-Link Enterprise Gigabit Switch users. New critical zero-day vulnerabilities expose networks to severe threats. Act now to mitigate risks.
China-Linked APT Leverages VMware Zero-Day to Root Critical Network Firewalls
Chinese nation-state actors exploited a VMware ESXi zero-day, chaining with PHP2Shell and Fragnesia to root firewalls. Global enterprises must bolster…
Global Identity Crisis: Critical Flaw Exposes Millions to Account Takeover
Researchers uncover a critical session-management flaw in cloud identity platforms, posing a severe risk of mass account takeovers for millions of users and…
AI-Driven Reconnaissance Amplifies Supply Chain Risk: A Global Case Study in Third-Party Vulnerability
A recent ethical hacking exercise in South Africa demonstrates how advanced AI-driven reconnaissance can autonomously map complex internal enterprise…
The Pre-Attack Economy: How Commodity Malware Fuels Ransomware's Global Reach
Explore the hidden economy of infostealers, loaders, and initial access brokers that fuels global ransomware attacks, offering critical insights for defenders.
Critical Ivanti Zero-Days Unleash Global Cyber Threat: Enterprises Urged to Act
Critical Ivanti Connect Secure and Policy Secure zero-day exploits threaten global enterprises. Understand the impact and implement urgent defensive…
CISA Mandates Urgent Patching Amid Escalating Nation-State Exploitation
CISA orders US federal agencies to patch critical vulnerabilities in edge devices, citing active exploitation by nation-state APTs. Global implications for…