Threat Intelligence

Security research organization FulcrumSec exploited a React2Shell vulnerability in an unpatched React frontend application hosted on LexisNexis Legal Professional's AWS infrastructure, exposing 3.9 million records.

Microsoft and Europol coordinated a takedown of the Tycoon2FA adversary-in-the-middle phishing platform responsible for over 30 million phishing emails per month and the majority of Microsoft-blocked phishing attempts.

A large-scale phishing campaign distributing Global Group ransomware via the Phorpiex botnet has been identified targeting organizations across multiple industries.