Threat actors are actively exploiting a critical directory-traversal vulnerability in Broadcom's VMware vCenter, tracked as CVE-2026-59310 (CVSS 9.8), to gain persistent remote…
PurpleHaze is a threat cluster disclosed by SentinelOne in April 2025. It targeted a South Asian government supporting entity with a Windows…
GoReShell is a Windows backdoor used by the PurpleHaze threat cluster. It leverages functionalities from the reverse_ssh tool to establish reverse SSH…
SentinelOne is a cybersecurity company that disclosed the PurpleHaze threat cluster in April 2025, which used the GoReShell backdoor. The disclosure highlighted…