All Posts

DTG’s latest threat brief examines the critical Klue supply-chain attack, in which attackers reportedly exploited a forgotten legacy credential to harvest OAuth tokens and access downstream Salesforce environments. The incident highlights the growing risk of third-party SaaS integrations and the need for stronger credential lifecycle controls, OAuth monitoring, and rapid incident response.

Explore how AI is transforming America’s technology reseller, MSP, and professional services industry from traditional product providers into strategic AI partners. Learn how predictive service delivery, agentic AI, cybersecurity innovation, and partnerships like DTG and RNP Capital are shaping the future of managed services and digital transformation.

Classification Urgent / Active Threat Prepared By DTG Threat Intelligence Team Date Issued 17 April 2026 Threat Actor Anthropic Mythos, Project Glasswing Executive Summary Anthropic’s Claude Mythos Preview and Project Glasswing mark a notable shift in cyber risk because they indicate that frontier AI can now find, chain, and help exploit software vulnerabilities at a level that Anthropic and third-party evaluators describe as materially beyond prior models. Anthropic states

DTG Threat Intelligence is tracking active exploitation of CVE-2026-25253, a high-severity remote code execution vulnerability impacting OpenClaw AI agent deployments, alongside a critical Moltbook database exposure. The flaws enable unauthenticated token theft, arbitrary command execution, and large-scale API key compromise. This advisory outlines confirmed exploitation activity, affected versions, and immediate remediation steps.

DTG Threat Intelligence is tracking active zero-day exploitation of two critical vulnerabilities, CVE-2026-1281 and CVE-2026-1340, impacting Ivanti Endpoint Manager Mobile (EPMM). These unauthenticated remote code execution flaws allow attackers to fully compromise exposed EPMM appliances, placing enterprise mobile device fleets, credentials, and configuration data at immediate risk. This advisory outlines observed exploitation, affected versions, and urgent remediation steps

Pegasos24/7 Threat Labs Advisory Classification Threat Advisory Threat Level Critical Date Issued 18 June 2024 Distribution To: Security Operations Centers (SOC), Virtualization Teams, Infrastructure Teams, Cloud Operations Executive Summary CVE-2024-37079 , a critical (CVSS 9.8) heap-based buffer overflow vulnerability in VMware vCenter Server, permits unauthenticated remote attackers with network access to execute arbitrary code with root privileges. The vulnerability exist

A high-severity WinRAR vulnerability, CVE-2025-8088, is being actively exploited in the wild by multiple threat actors. This advisory outlines how the flaw enables arbitrary code execution via crafted archives, who is targeting it, and the immediate actions security teams should take to reduce risk.

CVE-2025-14847 "MongoBleed” MongoDB Unauthenticated Memory Disclosure Vulnerability Classification: Threat Advisory Threat Level: High/Advisory Date Issued: 29 December 2025 Distribution: To: Security Operations Centers (SOC), Database Administrators (DBA), System Owners Executive Summary CVE-2025-14847, publicly disclosed and colloquially named "MongoBleed," is a critical, unauthenticated memory disclosure vulnerability affecting MongoDB Server across multiple versions.

Critical Zero-Day Exploited in Cisco Secure Email Appliances (CVE‑2025‑20393) DTG Threat Intelligence is tracking active exploitation of CVE-2025-20393, a critical zero‑day vulnerability (CVSS 10.0) impacting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager appliances running AsyncOS. The flaw allows unauthenticated remote attackers to execute arbitrary commands with root privileges, resulting in complete system compromise. Analysis links attacks to China‑b

Discovery and Disclosure On December 3, 2025, the React team disclosed CVE-2025-55182, a maximum‑severity (CVSS 10.0) remote code execution vulnerability in React Server Components, now widely referred to as “ React2Shell .” The flaw enables unauthenticated attackers to trigger server‑side code execution with a single crafted HTTP request against common React and Next.js deployments. React2Shell was discovered and responsibly disclosed by security researcher Lachlan Davids

DTG Threat Intelligence Brief | December 5, 2025 | Alex Waintraub & Chris Goodfellow On December 3, 2025, the software development ecosystem was rocked by the disclosure of CVE-2025-55182, a critical (CVSS 10.0) unauthenticated remote code execution (RCE) vulnerability in React Server Components, now known as “React2Shell.” Discovered by researcher Lachlan Davidson, the flaw allows attackers to execute code on servers running popular frameworks like Next.js with a single mali

What’s for Lunch? Cybersecurity Acronym Alphabet Soup! Gartner gives us all these acronyms, and I’m pretty sure somehow they make money...

A Vital Part of Enterprise Cyber Vigilance: The Security Operations Center (SOC) Team These often-unsung heroes are our wizards mastering...

Businesses of all sizes face increasingly sophisticated cyber threats. If your business uses the internet or email, you are at risk....

A Fresh Look, Enhanced Usability, and Richer Content The Distributed Technology Group (DTG) is thrilled to announce the launch of our...

Introducing Your Personal DTG Guide: Our Innovative Website AI Assistant Distributed Technology Group (DTG) is proud to introduce the...

From the start, DTG has been committed to our clients and running a high-quality organization. Which is why it was an easy decision to...

Imagine a world where your business operates at lightning speed, with pinpoint accuracy and unparalleled efficiency. That’s the power of...

The traditional castle-and-moat security model is no longer sufficient for modern enterprises. With resources spread across on-premises...