Rescana Blog
1206 posts | Page 9 of 51
Active Exploitation Alert
PoC Code Published for Critical NGINX and Ingress-NGINX Vulnerabilities (CVE-2026-42945 & CVE-2025-1974): Remote Code Execution Risk for Web Servers and Kubernetes Clusters
Cybersecurity Incident Analysis
OpenAI macOS Products Impacted by TanStack Supply Chain Attack via Mini Shai-Hulud Malware in TeamPCP Campaign
Cybersecurity Incident Analysis
OpenAI macOS Apps Targeted in TanStack Supply Chain Attack: Two Employee Devices Compromised, Urgent Updates Required
Technology
Kazuar Backdoor Evolution: How Secret Blizzard Transformed Kazuar into a Modular P2P Botnet Targeting Government and Enterprise Systems
Cybersecurity Incident Analysis
Grafana Labs GitHub Actions Breach: Code Repositories Accessed and Extortion Attempted via Misconfigured CI/CD Workflow
Active Exploitation Alert
Funnel Builder Plugin Vulnerability Exploited in WooCommerce Checkout Skimming Campaign; Security Patch Available
CVE Analysis Center
Claw Chain: Critical OpenClaw Vulnerabilities (CVE-2026-44112, 44113, 44115, 44118) Enable Data Theft, Privilege Escalation, and Persistent Access
Cybersecurity Incident Analysis
American Lending Center Ransomware Attack Exposes Sensitive Data of 123,158 Individuals: 2025 Data Breach Report
Compliance
CMMC is knocking on your door: What to do about it?
Technology
OpenAI Daybreak: Comprehensive Analysis of AI-Powered Vulnerability Detection, Patch Validation, and Supply Chain Security (2026 Report)
Cybersecurity Incident Analysis
Škoda Auto Online Shop Data Breach Exposes Customer Information via E-Commerce Software Vulnerability
Active Exploitation Alert
CVE-2026-41940: Active Exploitation of cPanel/WHM Authentication Bypass to Deploy Filemanager Backdoor
Cybersecurity Incident Analysis
Checkmarx Jenkins AST Plugin Supply Chain Attack: TeamPCP Compromise Follows KICS Breach and Trivy Credential Theft
Cybersecurity Incident Analysis
Supply Chain Attack: Fake OpenAI Repository on Hugging Face Distributes Infostealer Malware Targeting Developers and AI Tools
Cybersecurity Incident Analysis
ShinyHunters Launches Second Major Attack on Instructure Canvas LMS via Free-For-Teacher Accounts: May 2026 Breach Analysis and Mitigation
Cybersecurity Incident Analysis
Poland Water Treatment Plants ICS Breached by Russian and Belarusian APTs: 2025 Attack Exposes Critical Infrastructure Security Gaps
Technology
PamDOORa Linux Backdoor: How Malicious PAM Modules Steal SSH Credentials and Evade Detection in Enterprise Environments
Cybersecurity Incident Analysis
NVIDIA GeForce NOW Data Breach: Armenian Users’ Personal Information Exposed via GFN.am Partner System
Cybersecurity Incident Analysis
JDownloader Website Supply Chain Attack: Installers Replaced with Python RAT Malware (May 2026)
Cybersecurity Incident Analysis
Braintrust AWS Data Breach Prompts Urgent API Key Rotation for AI Platform Customers
Cybersecurity Incident Analysis
Vimeo Data Breach 2026: ShinyHunters Exploit Anodot Integration to Expose 119,000 User Records via Snowflake and BigQuery
Active Exploitation Alert
UAE Cyber Threat Landscape 2026: AI-Driven Attacks, Ransomware Surge, and Exploited Vulnerabilities in Ivanti, Microsoft, and Cisco Systems
Cybersecurity Incident Analysis
Instructure Canvas Data Breach: ShinyHunters Hack Exposes Student Information at 8,800+ Schools and Universities
Active Exploitation Alert