Sign in Subscribe

ThreatGrid Team

Android "No-Touch" Remote Code Execution: Patches You Need Now

Android "No-Touch" Remote Code Execution: Patches You Need Now

What's Happening? Google's August 2025 security update patches a critical flaw in Andriod's System component– CVE-2025-48530, dubbed the "No-Touch" RCE. This vulnerability allows attackers to execute code without any user interaction or elevated privileges, especially impacting devices running Android 16. In addition,

CitrixBleed 2: NetScaler Memory Leak (CVE-2025-5777)

CitrixBleed 2: NetScaler Memory Leak (CVE-2025-5777)

Citrix has confirmed a critical new vulnerability in NetScaler ADC and Gateway appliances, tracked as CVE-2025-5777. Dubbed CitrixBleed 2, this flaw builds upon lessons from previous memory exposure vulnerabilities – and once again places enterprise infrastructure at serious risk. Summary of CVE-2025-5777 * CVE ID: CVE-2025-5777 * Severity: Critical (CVSS 9.8) * Component

7 Essential Security Tools Every Cyber Pro Should Be Using in 2025

7 Essential Security Tools Every Cyber Pro Should Be Using in 2025

Why Security Tools Matter In today's threat landscape, even small teams need enterprise-grade visibility. Whether you're a red teamer, SOC analyst, or solo sysadmin, the right tools are critical to your cyber defense stack. At ThreatGrid, we believe in sharing tools that are accessible, powerful, and

Cybersecurity Fundamentals: What Every Modern User Should Know

Cybersecurity Fundamentals: What Every Modern User Should Know

Cybersecurity is no longer just the responsibility of IT departments – it's a personal and professional necessity for everyone connected to the internet. With rising ransomware attacks, phishing scams, and AI-powered threats, understanding the basics of cybersecurity is critical in 2025 and beyond. In this post, we'll

Red vs. Blue Team in 2025: The Evolving Cyber Battlefront

Red vs. Blue Team in 2025: The Evolving Cyber Battlefront

The Role Call: Who's Who on the Cyber Battlefield * Red Team Acts like ethical adversaries, simulating real-world attacks–phishing, lateral movement, privilege escalation–to reveal your weakest links and stress-test defenses. * Blue Team The defenders on duty: monitoring systems, detecting anomalies, responding to breaches, and reinforcing defenses in

Incident Response Spotlight: Marks & Spencer Ransomware Crisis

Incident Response Spotlight: Marks & Spencer Ransomware Crisis

Incident Overview In July 2025, Marks & Spencer (M&S), one of the UK's biggest retailers, fell victim to a ransomware attack attributed to the Scattered Spider group. The breach originated through a third-party vendor, not M&S directly, underscoring the dangers of supply chain compromise.

ToolShell in the Wild: Microsoft SharePoint Zero-Day (CVE-2025-53770 & CVE-2025-53771)

ToolShell in the Wild: Microsoft SharePoint Zero-Day (CVE-2025-53770 & CVE-2025-53771)

What You Need To Know Microsoft's zero-day vulnerability chain–codenamed ToolShell–combines CVE-2025-53770 (deserialization) and CVE-2025-53771 (authentication bypass) to enable unauthenticated remote code execution (RCE) on on-premises SharePoint Server. This exploit actively used by threat actors and has caused widespread compromise.