Rescana Blog
1206 posts | Page 4 of 51
Technology
Avalon Malware Framework: Advanced Modular Threat Leveraging CrownX Ransomware Targets Windows Systems and Supply Chain Security
Active Exploitation Alert
Active Exploitation Alert: North Korean PolinRider Supply Chain Attack Targets npm, Packagist, Go Modules, and Chrome Extensions
Active Exploitation Alert
Active Exploitation Alert: Critical Microsoft SharePoint Server RCE Vulnerability CVE-2026-45659 Added to CISA KEV Catalog
Active Exploitation Alert
Active Exploitation Alert: Google Chrome 151 Security Update Fixes 382 Vulnerabilities, Including Actively Exploited CVE-2026-11645
Cybersecurity Incident Analysis
Nissan Americas Employee Data Breach Analysis: Oracle PeopleSoft Zero-Day (CVE-2026-35273) Exploitation and Supply Chain Risks
Technology
Microsoft Extends Hotpatch Support for Windows Server 2022 Datacenter: Azure Edition Until October 2027 – Technical, Security, and Compliance Implications
CVE Analysis Center
DirtyClone (CVE-2026-43503): Critical Linux Kernel Vulnerability Enables Local Privilege Escalation to Root on Major Distributions
CVE Analysis Center
CVE-2026-55200: Critical libssh2 Client-Side SSH Vulnerability Exposes Curl, Git, PHP to Remote Code Execution Risk
Active Exploitation Alert
Active Exploitation Alert: Microsoft Edge Hit by StegoAd Malware via 119 Malicious Extensions Affecting Over 2.6 Million Users
Active Exploitation Alert
Active Exploitation Alert: Critical Oracle E-Business Suite CVE-2026-46817 Vulnerability Targeting Oracle Payments Module
Cybersecurity Incident Analysis
Polymarket Supply-Chain Attack Analysis: $3 Million Cryptocurrency Theft via Compromised Third-Party Dependency
Cybersecurity Incident Analysis
Klue Supply Chain Breach Exposes OAuth Tokens and Salesforce Data in Multi-Stage Cybersecurity Incident (June 2026)
Cybersecurity Incident Analysis
KDDI Email System Breach Exposes Up to 14.2 Million Credentials Across Six Japanese ISPs
CVE Analysis Center
CVE-2026-53325: Critical Linux Kernel AMD64 AGP Driver Vulnerability Leads to Virtualization Denial of Service (DoS)
CVE Analysis Center
CVE-2026-13538: Command Injection Vulnerability in Wavlink WL-NU516U1-A Wireless Adapter (M16U1_V240425)
CVE Analysis Center
CVE-2026-13537: Critical CSRF Vulnerability in CodeAstro Human Resource Management System 1.0 – Analysis and Mitigation Guidance
CVE Analysis Center
CVE-2026-13536: Reflected XSS Vulnerability in GotoHTTP Remote Access Platform (reg.12x Endpoint) Analysis and Mitigation
Active Exploitation Alert
Active Phishing Campaign Exploits Calendly and Photo ZIP Files to Target Hotels with Node.js Malware – Microsoft Alerts Hospitality Sector
Active Exploitation Alert
Active Exploitation Alert: Miasma Malware Campaign Targets npm Packages and GitHub Actions in Major Supply Chain Attack
Active Exploitation Alert
Active Exploitation Alert: Cisco CUCM CVE-2026-20230 SSRF-RCE Flaw Weaponized Within 24 Hours of Disclosure
Technology
GitHub Actions Updates Checkout to Block Forked Pull Request Supply Chain Attacks in CI/CD Workflows
Active Exploitation Alert
FortiBleed Credential Harvesting Campaign: Active Exploitation of FortiGate Firewalls Compromises Over 110 Million Credentials
CVE Analysis Center
CVE-2026-1606: Code Injection Vulnerability in GitLab CE/EE Snippets – Affected Versions, Risks, and Remediation Steps
CVE Analysis Center