Decryption Digest — Cybersecurity Threat Intelligence https://www.decryptiondigest.com High-impact threat intelligence briefings covering zero-days, ransomware, nation-state attacks, and critical CVEs. Read by 50,000+ security professionals. en-us info@decryptiondigest.com (Decryption Digest) info@decryptiondigest.com (Decryption Digest) Sun, 12 Apr 2026 04:26:10 GMT https://www.decryptiondigest.com/images/logo.png Decryption Digest https://www.decryptiondigest.com <![CDATA[North Korea Hid 1,700 Malicious Packages Inside Your Dev Team's Tools]]> https://www.decryptiondigest.com/blog/north-korea-supply-chain-1700-packages https://www.decryptiondigest.com/blog/north-korea-supply-chain-1700-packages Fri, 10 Apr 2026 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) supply-chain North-Korea UNC1069 npm WAVESHAPER DPRK Axios <![CDATA[Chrome's 4th Zero-Day of 2026 Was Already in the Wild]]> https://www.decryptiondigest.com/blog/chrome-zero-day-cve-2026-5281 https://www.decryptiondigest.com/blog/chrome-zero-day-cve-2026-5281 Thu, 09 Apr 2026 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) chrome zero-day CVE-2026-5281 WebGPU CISA-KEV <![CDATA[Qilin Found a Way to Blind Your EDR Before You Know They're Inside]]> https://www.decryptiondigest.com/blog/qilin-byovd-edr-silencing https://www.decryptiondigest.com/blog/qilin-byovd-edr-silencing Wed, 08 Apr 2026 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) ransomware BYOVD Qilin EDR threat-intelligence <![CDATA[CVE-2023-20198 Explained: Cisco IOS XE Web UI Zero-Day and the 50,000-Device Compromise]]> https://www.decryptiondigest.com/blog/cve-2023-20198-cisco-ios-xe-explained https://www.decryptiondigest.com/blog/cve-2023-20198-cisco-ios-xe-explained Mon, 16 Oct 2023 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2023-20198 CVE-2023-20273 Cisco IOS XE network infrastructure zero-day implant privilege escalation <![CDATA[CVE-2023-23397 Explained: The Outlook Zero-Click NTLM Hash Theft Vulnerability]]> https://www.decryptiondigest.com/blog/cve-2023-23397-outlook-ntlm-explained https://www.decryptiondigest.com/blog/cve-2023-23397-outlook-ntlm-explained Tue, 14 Mar 2023 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2023-23397 Outlook NTLM hash theft APT28 zero-click credential theft relay attack <![CDATA[CVE-2022-41040 and CVE-2022-41082 Explained: ProxyNotShell, the Microsoft Exchange Chain]]> https://www.decryptiondigest.com/blog/cve-2022-41040-proxynotshell-explained https://www.decryptiondigest.com/blog/cve-2022-41040-proxynotshell-explained Thu, 29 Sep 2022 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2022-41040 CVE-2022-41082 ProxyNotShell Microsoft Exchange SSRF RCE zero-day <![CDATA[CVE-2022-30190 Explained: Follina, the Zero-Click Microsoft Office RCE]]> https://www.decryptiondigest.com/blog/cve-2022-30190-follina-explained https://www.decryptiondigest.com/blog/cve-2022-30190-follina-explained Tue, 14 Jun 2022 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) Follina CVE-2022-30190 MSDT Microsoft Office RCE zero-click <![CDATA[CVE-2022-26134 Explained: Confluence Server Critical OGNL Zero-Day]]> https://www.decryptiondigest.com/blog/cve-2022-26134-confluence-ognl-2-explained https://www.decryptiondigest.com/blog/cve-2022-26134-confluence-ognl-2-explained Thu, 02 Jun 2022 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2022-26134 Confluence Atlassian OGNL injection zero-day RCE cryptomining ransomware <![CDATA[CVE-2022-22965 Explained: Spring4Shell, the Spring Framework RCE Vulnerability]]> https://www.decryptiondigest.com/blog/cve-2022-22965-spring4shell-explained https://www.decryptiondigest.com/blog/cve-2022-22965-spring4shell-explained Thu, 31 Mar 2022 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2022-22965 Spring4Shell Spring Framework Java RCE ClassLoader Tomcat <![CDATA[CVE-2021-44228 Explained: Log4Shell, the Most Critical Vulnerability in a Decade]]> https://www.decryptiondigest.com/blog/cve-2021-44228-log4shell-explained https://www.decryptiondigest.com/blog/cve-2021-44228-log4shell-explained Wed, 15 Dec 2021 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) Log4Shell CVE-2021-44228 Log4j RCE JNDI Apache Java <![CDATA[CVE-2021-40444 Explained: The MSHTML Remote Code Execution Vulnerability]]> https://www.decryptiondigest.com/blog/cve-2021-40444-mshtml-explained https://www.decryptiondigest.com/blog/cve-2021-40444-mshtml-explained Tue, 07 Sep 2021 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2021-40444 MSHTML ActiveX Office RCE zero-day Windows Trident <![CDATA[CVE-2021-26084 Explained: Confluence Server OGNL Injection and Mass Exploitation]]> https://www.decryptiondigest.com/blog/cve-2021-26084-confluence-ognl-explained https://www.decryptiondigest.com/blog/cve-2021-26084-confluence-ognl-explained Wed, 25 Aug 2021 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2021-26084 Confluence Atlassian OGNL injection RCE template injection ransomware <![CDATA[CVE-2021-34473 Explained: ProxyShell, the Pre-Auth Exchange RCE Chain]]> https://www.decryptiondigest.com/blog/cve-2021-34473-proxyshell-exchange-explained https://www.decryptiondigest.com/blog/cve-2021-34473-proxyshell-exchange-explained Tue, 13 Jul 2021 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2021-34473 ProxyShell Exchange Server Microsoft RCE pre-auth ransomware web shell <![CDATA[CVE-2021-34527 Explained: PrintNightmare and RCE via Windows Print Spooler]]> https://www.decryptiondigest.com/blog/cve-2021-34527-printnightmare-explained https://www.decryptiondigest.com/blog/cve-2021-34527-printnightmare-explained Fri, 02 Jul 2021 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) PrintNightmare CVE-2021-34527 Windows Print Spooler RCE LPE SYSTEM <![CDATA[CVE-2021-21985 Explained: VMware vCenter Server Remote Code Execution]]> https://www.decryptiondigest.com/blog/cve-2021-21985-vmware-vcenter-rce-explained https://www.decryptiondigest.com/blog/cve-2021-21985-vmware-vcenter-rce-explained Tue, 25 May 2021 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2021-21985 VMware vCenter vSphere RCE hypervisor virtualization security <![CDATA[CVE-2021-26855 Explained: ProxyLogon and the Microsoft Exchange Mass Exploitation Event]]> https://www.decryptiondigest.com/blog/cve-2021-26855-proxylogon-explained https://www.decryptiondigest.com/blog/cve-2021-26855-proxylogon-explained Wed, 10 Mar 2021 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) ProxyLogon CVE-2021-26855 Microsoft Exchange SSRF RCE Hafnium <![CDATA[CVE-2021-27101 Explained: Accellion FTA SQL Injection and the CLOP Ransomware Campaign]]> https://www.decryptiondigest.com/blog/cve-2021-27101-accellion-fta-explained https://www.decryptiondigest.com/blog/cve-2021-27101-accellion-fta-explained Sat, 23 Jan 2021 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2021-27101 Accellion FTA SQL injection CLOP ransomware data extortion supply chain <![CDATA[CVE-2020-1472 Explained: Zerologon and Instant Active Directory Domain Compromise]]> https://www.decryptiondigest.com/blog/cve-2020-1472-zerologon-explained https://www.decryptiondigest.com/blog/cve-2020-1472-zerologon-explained Mon, 14 Sep 2020 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) Zerologon CVE-2020-1472 Active Directory Domain Controller Netlogon Windows <![CDATA[CVE-2020-5902 Explained: F5 BIG-IP TMUI Remote Code Execution]]> https://www.decryptiondigest.com/blog/cve-2020-5902-f5-big-ip-explained https://www.decryptiondigest.com/blog/cve-2020-5902-f5-big-ip-explained Wed, 01 Jul 2020 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2020-5902 F5 BIG-IP TMUI RCE load balancer network infrastructure APT <![CDATA[CVE-2020-0796 Explained: SMBGhost, the Wormable Windows 10 Kernel Vulnerability]]> https://www.decryptiondigest.com/blog/cve-2020-0796-smbghost-explained https://www.decryptiondigest.com/blog/cve-2020-0796-smbghost-explained Thu, 12 Mar 2020 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2020-0796 SMBGhost SMBv3 Windows 10 wormable kernel exploit CoronaBlue <![CDATA[CVE-2019-11510 Explained: Pulse Secure VPN Arbitrary File Read and Credential Theft]]> https://www.decryptiondigest.com/blog/cve-2019-11510-pulse-secure-vpn-explained https://www.decryptiondigest.com/blog/cve-2019-11510-pulse-secure-vpn-explained Thu, 22 Aug 2019 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2019-11510 Pulse Secure VPN credential theft arbitrary file read ransomware APT <![CDATA[CVE-2018-13379 Explained: Fortinet FortiGate VPN Path Traversal and Credential Exposure]]> https://www.decryptiondigest.com/blog/cve-2018-13379-fortinet-fortigate-explained https://www.decryptiondigest.com/blog/cve-2018-13379-fortinet-fortigate-explained Fri, 24 May 2019 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2018-13379 Fortinet FortiGate FortiOS VPN path traversal credential exposure APT <![CDATA[CVE-2019-0708 Explained: BlueKeep, the Wormable RDP Vulnerability in Legacy Windows]]> https://www.decryptiondigest.com/blog/cve-2019-0708-bluekeep-explained https://www.decryptiondigest.com/blog/cve-2019-0708-bluekeep-explained Tue, 14 May 2019 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) BlueKeep CVE-2019-0708 RDP Remote Desktop Windows wormable RCE <![CDATA[CVE-2017-0144 Explained: EternalBlue, the NSA Exploit Behind WannaCry and NotPetya]]> https://www.decryptiondigest.com/blog/cve-2017-0144-eternalblue-explained https://www.decryptiondigest.com/blog/cve-2017-0144-eternalblue-explained Mon, 15 May 2017 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) EternalBlue CVE-2017-0144 WannaCry NotPetya SMB MS17-010 NSA <![CDATA[CVE-2017-5638 Explained: The Apache Struts Flaw Behind the Equifax Breach]]> https://www.decryptiondigest.com/blog/cve-2017-5638-apache-struts-equifax-explained https://www.decryptiondigest.com/blog/cve-2017-5638-apache-struts-equifax-explained Tue, 07 Mar 2017 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) CVE-2017-5638 Apache Struts OGNL injection Equifax RCE Java web application security <![CDATA[CVE-2014-0160 Explained: Heartbleed and the Vulnerability That Broke the Internet]]> https://www.decryptiondigest.com/blog/cve-2014-0160-heartbleed-explained https://www.decryptiondigest.com/blog/cve-2014-0160-heartbleed-explained Mon, 07 Apr 2014 00:00:00 GMT info@decryptiondigest.com (Decryption Digest) Heartbleed CVE-2014-0160 OpenSSL TLS memory-disclosure cryptography