Rescana Blog
1206 posts | Page 2 of 51
Active Exploitation Alert
Active Exploitation Alert: FakeGit Campaign Abuses 7,600 GitHub Repositories to Distribute SmartLoader and Lumma Stealer Malware via Open-Source Supply Chain
Cybersecurity Incident Analysis
Romania ANCPI Land Registry Wiped in Credential-Based Cyberattack: Incident Analysis and Mitigation Recommendations
CVE Analysis Center
CVE-2026-14266: Critical 7-Zip XZ Archive Decoder Vulnerability Enables Remote Code Execution (Patch in 26.02)
Cybersecurity Incident Analysis
AI-Driven Cyberattack Compromises Hugging Face Production Infrastructure via Autonomous Agent: Incident Analysis and Mitigation Strategies
Active Exploitation Alert
Active Exploitation Alert: WP2Shell Critical WordPress Core Vulnerabilities (CVE-2026-63030 & CVE-2026-60137) Enable Unauthenticated RCE in the Wild
Active Exploitation Alert
Active Exploitation Alert: Critical NGINX Vulnerabilities (CVE-2026-42533, CVE-2026-42945) Enable Remote Code Execution and Worker Crashes
Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2026-6875 Remote Code Execution Vulnerability in ServiceNow AI Platform
CVE Analysis Center
Critical wp2shell CVEs Enable Unauthenticated Remote Code Execution in WordPress Core (CVE-2026-63030, CVE-2026-60137)
Active Exploitation Alert
Active Exploitation Alert: Unauthenticated RCE Vulnerabilities in WordPress Core (wp2shell) with Public Exploits – Immediate Patching Required
Active Exploitation Alert
Active Exploitation Alert: Surge in ACR Stealer Malware Targeting Microsoft 365, OneDrive, SharePoint, and Edge Users
Cybersecurity Incident Analysis
Abbott Laboratories Cybersecurity Breach Analysis: ShinyHunters Attack on Exact Sciences Systems and ShadowByt3$ LabCentral Portal Incident
Cybersecurity Incident Analysis
Ernst & Young Data Breach Analysis: Third-Party IT Support Platform Compromise Exposes Client Tax and Financial Information
Cybersecurity Incident Analysis
Spanish National Police Dismantle €140 Million BEC and Investment Fraud Cybercrime Ring Targeting Financial Institutions and Businesses
Technology
Critical Windows 10, 11, and Server Zero-Day: 'LegacyHive' Exploit Enables Privilege Escalation via User Profile Service Vulnerability
Active Exploitation Alert
Active Exploitation Alert: Google Gemini CLI Abused for Botnet Operations and Malware Deployment
Technology
Gold Eagle Initiative: How AI Is Transforming Vulnerability Coordination and Cybersecurity Across Government and Industry
Service Disruption Analysis
Critical Service Disruption Analysis: Zero-Day Vulnerabilities (CVE-2026-2699 & CVE-2026-2701) Impacting Progress ShareFile Storage Zones Controller v5.x
CVE Analysis Center
Chrome 150 and Firefox 152 Patch Critical Vulnerabilities: CVE Analysis and Enterprise Risk Advisory
Active Exploitation Alert
Active Exploitation Alert: Critical Ivanti Sentry and Fortinet Vulnerabilities (CVE-2026-10520) Patched Amid Ongoing Attacks
Active Exploitation Alert
Active Exploitation Alert: AsyncAPI npm Supply Chain Attack Delivers Multi-Stage Miasma Botnet via Compromised GitHub Actions
General News
U.S. Sanctions First VPN Service (1VPNS) and Belarusian Cryptor Provider for Enabling Ransomware Attacks
Cybersecurity Incident Analysis
Nihon Kotsu Cyberattack Analysis: Malware Disruption of Japan’s Largest Taxi Dispatch and Reservation Systems in July 2026
Active Exploitation Alert
Active Exploitation Alert: ShinyHunters Abuse OAuth and Vendor Integrations to Breach Salesforce and SaaS Environments
Active Exploitation Alert