Rescana Blog
1206 posts | Page 3 of 51
Active Exploitation Alert
Active Exploitation Alert: 148 Malicious npm Packages Masquerading as Student Proxies Turn Browsers Into DDoS Botnet
Email Security
Misconfigured Server Exposes Evilginx Phishing Campaigns Bypassing MFA to Target Microsoft 365 Accounts
Cybersecurity Incident Analysis
Centers Laboratory Data Breach Analysis: 540,000 Patient Records Exposed by Worldleaks in 2025 Cyberattack
Active Exploitation Alert
Active Exploitation Alert: Critical Joomla Extension Vulnerabilities Enable Remote Code Execution and Server Compromise
Technology
Unpatched XRING Vulnerability in XQUIC Exposes HTTP/3 Servers to Remote Crash Risk
Technology
Ghostcommit: Multimodal Prompt Injection Attack Exposes AI Code Review Tools to Supply Chain Risks
CVE Analysis Center
Critical U-Boot FIT Signature Verification Vulnerabilities (CVE-2026-46728) Expose Embedded Linux Devices to Stealthy Firmware Attacks
CVE Analysis Center
Critical CVE-2026-2699 and CVE-2026-2701 Vulnerabilities Force Immediate Shutdown of Progress ShareFile Storage Zone Controller v5.x
Active Exploitation Alert
Active Exploitation Alert: WP-SHELLSTORM Campaign Mass-Compromises WordPress Sites via Plugin Vulnerabilities
Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2026-20896 Authentication Bypass in Gitea Docker Image Exposes Repositories and Secrets
Cybersecurity Incident Analysis
Union County, Ohio Government Pays $1 Million Bitcoin Ransom to Kairos Cyber Extortion Group After Data-Only Attack
CVE Analysis Center
Rogue Agent Vulnerability in Google Dialogflow CX Playbooks Exposes AI Agents to Code Injection and Data Exfiltration
Cybersecurity Incident Analysis
KDDI Email System Data Breach Exposes Over 12 Million Credentials Across Six Major Japanese ISPs
Active Exploitation Alert
Active Exploitation Alert: Prompt Injection Vulnerability in GitHub Agentic Workflows Threatens Software Supply Chain Security
Cybersecurity Incident Analysis
Accenture Azure DevOps Data Breach Analysis: Source Code and Credentials Exposed in July 2026 Cyberattack
Active Exploitation Alert
Active Exploitation Alert: Iranian Cavern Manticore APT Deploys Modular Cavern C2 Malware Targeting Israeli Organizations
Active Exploitation Alert
Active Exploitation Alert: Indirect Prompt Injection Attacks Target AI Agents to Facilitate Unauthorized Cryptocurrency Payments
Active Exploitation Alert
Active Exploitation Alert: Hidden Admin Backdoor (CVE-2026-11405) in Tenda Router Firmware Enables Unauthenticated Remote Access
Active Exploitation Alert
Active Exploitation Alert: Critical Gitea Docker Authentication Bypass Vulnerability (CVE-2026-20896) Under Attack
Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2024-12356 Authentication Bypass and RCE in BeyondTrust Remote Support and PRA
Active Exploitation Alert
Active Exploitation Alert: Citrix NetScaler ADC & Gateway Vulnerability (CVE-2023-4966) CitrixBleed-ing Again Under Massive Attack
Technology
OpenClaw Skill Marketplace: Security Risks and Supply Chain Threats in Agentic AI Platforms
Cybersecurity Incident Analysis
Medtronic Corporate IT Data Breach 2026: ShinyHunters Attack Exposes 3.8 Million Records
CVE Analysis Center