DEFCON 3Global Threat Level

THREAT
INTELLIGENCE

Critical security advisories, vulnerability breakdowns, and defensive strategies.
Written for engineers, not just CISOs.

Live Feed

CISA KEV Integration

LATEST ADVISORIES

5 RECORDS FOUND

CRITICALDecember 18, 2025•8+ CVEs

Your Edges Are the New Entry

Perimeter Breaches, Ghost Sessions, and the Year of Stolen Billions

Every layer of your stack getting hit at once. WatchGuard VPN RCE, Chrome ANGLE zero-day, WhatsApp GhostPairing, OAuth device-code phishing, YouTube loaders, and nation-state operations. Complete threat breakdown with detection queries, mitigation strategies, and interactive response scorecard.

WatchGuardChromeWhatsAppOAuthLoadersNation-State

CRITICALDecember 16, 2025•5 CVEs

Infrastructure Under Siege: Five Attacks That Turn Your Stack Against You

Pornhub, FortiGate, SoundCloud, Askul, Chrome Extension

Five infrastructure-layer attacks in 48 hours. Pornhub extortion (200M+ records), FortiGate active exploitation, SoundCloud breach (175M+ users), Askul ransomware (740k records), Chrome extension weaponization. Complete threat actor profiles, detection signals, and business impact analysis.

PornhubFortiGateSoundCloudRansomHouseChrome

CRITICALDecember 10, 2025•4 CVEs

Patch-Window Pressure: The 48-Hour Sprint

React2Shell, WinRAR KEV, Microsoft Zero-Day, .NET SOAPwn

Four critical vulnerabilities require immediate action. React2Shell (CVSS 10.0) exploited in <5 hours, WinRAR CISA KEV deadline, Microsoft zero-day actively exploited, .NET SOAPwn affecting multiple vendors.

React2ShellWinRARMicrosoftCISA KEV

CRITICALDecember 8, 2025•2 CVEs

Document Parsers & Database Admins Under Fire

Apache Tika XXE, pgAdmin4 RCE

Two critical vulnerabilities disclosed by Censys: Apache Tika XXE injection (CVE-2025-66516) and pgAdmin4 RCE via dump restore (CVE-2025-12762). Censys tracking exposed instances.

XXERCEApache TikapgAdmin4

CRITICALDecember 6, 2025•30+ CVEs

The Week Everything Got Compromised

React2Shell, IDEsaster, PromptPwnd

Four critical vulnerability disclosures in 48 hours. React servers, AI coding assistants, CI/CD pipelines all affected. Chinese APTs already exploiting.

ReactAI IDEsCI/CDSupply Chain

Initialize Intelligence Feed

Threat actors don't wait for patch Tuesday. Get real-time advisories injected directly into your workflow.

Access Archives

THREATINTELLIGENCE