Skip to content
Threat Feed
Subscribe

Vendor

Rejetto

2 briefs RSS
high threat

Disruption of Integrity Technology Group Hacking Tools

The US government disrupted infrastructure supporting Integrity Technology Group tools MicroScan and FishHub, which Chinese state-sponsored actors, including Flax Typhoon, used to compromise critical infrastructure.

Struts +6 Flax Typhoon +1 state-sponsored intelligence-disruption critical-infrastructure espionage
3t 6i
critical advisory

Rejetto HFS Vulnerability Allows Remote Code Execution via Session Forgery (CVE-2026-61500)

A remote attacker can exploit a critical vulnerability, CVE-2026-61500, in Rejetto HFS versions 3.0.0 through 3.2.0 by recovering the session-cookie signing key due to poor randomness, forging an administrator session, and achieving remote code execution.

HFS +1 web-vulnerability rce session-hijacking
4t 1c updated