The Q3 Vulnerability Pulse: Discovery ≠ Exploitation

This weekly Threat Source newsletter reviews rising CVE volumes versus KEV, discloses Cisco Talos / Recorded Future reporting on UAT-6275 espionage activity targeting CIS governments and critical infrastructure—noting multiple infection chains delivering custom reverse shells via macro documents, GitHub-hosted payloads and a WinRAR exploit—and highlights other active threats including an Ivanti zero-day allowing root access and SonicWall SSRF attacks, plus malware IOCs and defensive recommendations.