phishing
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
A new spear-phishing campaign, dubbed "SilkParasite," has been observed targeting organizations in Central Asia. The campaign, attributed to a Chinese-nexus threat group with reported links to FamousSparrow, is notable for deploying a variety of Remote Access Trojans (RATs). This activity provides a window into the evolving geopolitical, technical, and strategic operational patterns of certain…
CVE-2026-66066critical
KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)
A critical vulnerability, designated CVE-2026-66066 and nicknamed "KindaRails2Shell," has been identified in Ruby on Rails (Rails), a widely used framework for web applications. The flaw could allow unauthenticated attackers to read arbitrary files from a server and, in some configurations, achieve full remote code execution.