Skip to content
Threat Feed
Subscribe

Vendor

Nx

2 briefs RSS
high advisory

Nx Console Compromised Extension Harvesting Credentials (CVE-2026-48027)

Nx Console contained an embedded malicious code vulnerability (CVE-2026-48027) which allowed a malicious version of the extension to be published and harvest credentials from disk and memory.

Nx Console supply-chain credential-theft cve
2r 1t 1c
high advisory

DNS Kerberos Coercion Attempt Detection

This brief details the detection of DNS-based Kerberos coercion attacks, where adversaries inject marshaled credential structures into DNS records to spoof SPNs and redirect authentication, as seen in CVE-2025-33073, using Suricata and Sysmon event ID 22.

PoC Fortinet edge appliances +32 kerberos coercion dns cve-2025-33073
3r 3t 5c 2i updated