react

ZeroDay Field Notes - React2Shell: From Theory to Practice in 72 Hours

React2Shell exploited within hours; patch now. Active Gladinet attacks persist. Malware tradecraft and AI-assisted reverse engineering insights.

nessus

EvilBit Threat Digest - Your Scanner Just Got Smarter

Nessus plugin refresh expands detections across Linux, QNAP, FreeBSD and PRTG, adding new CVE coverage and TLS configuration checks.

react

EvilBit Threat Digest - A Critical Reaction to the Week in Bugs

Critical React RCE sparks urgent patches as malware campaigns, APT spyware, supply-chain hits, and breaches highlight fragile digital trust.

zero-day

ZeroDay Field Notes - October-December 2025 Vulnerability and Exploit Highlights

An in-depth analysis of October-December 2025's major cybersecurity events, including pre-auth RCEs, rootkits on network switches, Windows 10's last free patches, and advanced tradecraft with blockchain C2 and AI phishing.

browser-extensions

EvilBit Threat Digest - Malicious Extensions, APT Overlap, Mobile Banking Malware

4.3M malicious extensions, evolving npm worm and BEC, overlapping APTs, advanced Android banking trojans, and a Rust-based Linux APT toolkit.

supply-chain

EvilBit Threat Digest - When the Supply Chain Eats Itself

Two weeks of supply chain chaos: npm worm hijacks repos, OAuth integrations abused, APTs use cloud C2, and IoT botnets test massive DDoS.

steganography

ZeroDay Field Notes - When Pixels Hide Payloads and Trust Gets Weaponized

From PNG-steganography payloads to dev-tool supply chain compromises, attackers scale obfuscation and weaponize trust across platforms.

ai

EvilBit Threat Digest - When AI Turns on Itself and Attackers Go Kinetic

Iranian APTs enabling kinetic strikes, AI botnet via Ray RCE, creative malware via Blender, WhatsApp, homoglyphs, and critical patches.

oauth

EvilBit Threat Digest - OAuth Tokens and Other People's Problems

We faced a sprawling mess of supply chain compromises, state-sponsored espionage campaigns, insider threats, mobile malware that bypasses end-to-end encryption, and router hijacking this week.

edr-evasion

ZeroDay Field Notes - Payloads in the Browser, Rootkits in the ATM

EDR evasion with RONINGLOADER, Windows admin bypass, browser push C2, router AitM updates, Lazarus tweaks, and an ATM heist with a Pi.

steganography

EvilBit Threat Digest: Steganography Shenanigans and Espionage Escalations

Weekly digest: stego loaders, stealers, APT espionage on aerospace and policy orgs, VDI pivots, and critical RHEL and OT patch updates.

patches

EvilBit Threat Digest - Patches, Leaks, and AI Sneaks: The Week That Kept on Giving

Weekly cybersecurity digest: vendor patches and exploits, major data leaks, evolving malware and autonomous AI-orchestrated espionage, and ransomware fragmentation.