Tag: Volexity
Ivanti VPN chain exploits CVE-2026-104935 for root access
A previously unknown crew used a three-bug chain to take full control of fully patched Ivanti Connect Secure appliances.
A Chinese crew turned three unpatched browser bugs into a backdoor
Volexity has linked a China-aligned group to a three-bug Chrome and Windows chain that ran before either vendor shipped a…
Chinese spies pair a Chrome zero-day with a fake Gemini extension
A recently patched Chrome and Windows exploit chain is now delivering two separate espionage toolsets against NGO targets.
Two SonicWall SMA zero-days exploited a month before disclosure
Attackers used CVE-2026-15409 and CVE-2026-15410 to compromise SonicWall SMA 1000 appliances via SSRF and code injection starting June 22.
China-Linked Hackers Target Linux Appliances with New BSD Backdoor Variant
A Chinese cyber espionage group deployed a BSD variant of the BRICKSTORM backdoor on Linux appliances, infiltrating a victim's network…