Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
3 / 3 results
criticalbug_reportVulnerabilityTencent Sogou Input Method RCE exploited by UNC3569 for GrayRabbit
Tencent Sogou Input Method for Windows, versions prior to 16.3.0.3498. Hundreds of millions of installations in China. Vulnerability CVE-2026-51990 is a one-click remote code execution flaw exploiting unvalidated URI handler, unrestricted URL navigat…
highperson_alertThreat ActorUNC3569 Exploits Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor
UNC3569 is a China-linked threat actor attributed by Google Threat Intelligence to the country's hacker-for-hire ecosystem. Active since at least 2021, the group targets government, education, technology, and finance sectors primarily in East and Sou…
highbug_reportVulnerabilityWeChat zero-click worm enables account takeover via incoming calls
WeChat versions prior to 8.0.77 (Android) and 8.0.76 (iOS) on iPhone and Android devices. Tested vulnerable versions: WeChat 8.0.76 (Android) and 8.0.75 (iOS). Affects an estimated 1.439 billion monthly active users globally.