Cyware Social
will be sunset on April 15, 2026. The service is being replaced by
Cyware's Daily Threat Intel Briefs,
offering curated security advisories on the latest threats. Enterprise users can contact us
here → for more details.
A recently disclosed vulnerability in Spring Security’s authentication mechanism (CVE-2025-22234) allows attackers to infer valid usernames by analyzing login response times.
Analysts have identified 34 different plugins associated with DCRat, enabling dangerous functionalities such as keystroke logging, webcam access, file theft, and password exfiltration.
Defend Against Threats with Cyber Fusion
Cyware is the leading provider of cyber fusion solutions that power threat intelligence sharing , end-to-end automation and 360-degree threat response.