Rescana Blog
1256 posts | Page 1 of 53
CVE Analysis Center
Critical Unpatched Vulnerabilities in Kaltura mwEmbed Expose Organizations to Remote Code Execution and File Read Attacks (CVE-2026-19912, CVE-2026-19913)
CVE Analysis Center
CVE-2026-18963 Analysis: Critical Keycloak Password Reset Vulnerability Allows Unauthenticated Account Takeover
Active Exploitation Alert
Weedhack Malware Actively Exploiting Minecraft Modding Community via SEO Poisoning and Fake Client Downloads
Active Exploitation Alert
Active Exploitation Alert: WordlistLoader Bypasses Security Defenses to Deliver Amatera Stealer Malware on Windows Systems
Technology
ToxicPanda Android Malware Exploits VPN Permissions to Block Google Play and Play Protect: Security Risks and Mitigation Strategies
Active Exploitation Alert
Active Exploitation Alert: Critical GitLab CVE-2026-19478 Code Injection Vulnerability Targets Unpatched Instances
Active Exploitation Alert
Active Exploitation Alert: Critical Supply Chain Attack via 14 Trojanized npm Packages Drops RedC2 4.0 AI-Assisted Linux Backdoor
Technology
CDN Tsunami: Critical HTTP/3 to HTTP/1.1 Protocol Translation Vulnerability Triggers Up to 350x DoS Amplification Across Major CDN Providers
Active Exploitation Alert
Active Exploitation of MLflow SSRF Vulnerability (CVE-2026-64849) Enables Cloud Credential Theft and Account Compromise
Active Exploitation Alert
Active Exploitation Alert: ToxicPanda 2.0 and GoldDigger Banking Malware Escalate On-Device Fraud Against Android Users Globally
Cybersecurity Incident Analysis
Massive Azure/Entra Credential Theft Exposes Fortune 500 Employee Directories in Global Exfiltration Campaign
CVE Analysis Center
CVE-2026-19478: Critical GitLab CE/EE GraphQL Vulnerability Enables Remote Deletion of Public Projects and User Data
CVE Analysis Center
Critical Command Injection Vulnerability in Snowflake snowflake-connector-net GitHub Actions Exposes Jira Credentials
Cybersecurity Incident Analysis
Trezor Data Breach Analysis: 14,000 Customers Exposed in ShipMonk Metabase SQL Injection Incident
Service Disruption Analysis
Threema Service Disruption Analysis: Large-Scale DDoS Attacks Impact Secure Messaging Platform in August 2026
Cybersecurity Incident Analysis
SafePal Order-Tracking Plugin Data Breach Exposes 39,798 Customers to Phishing Risk
Cybersecurity Incident Analysis
RingCentral Data Breach Analysis: 1.6 Million Records Compromised in ShinyHunters Social Engineering Attack
CVE Analysis Center
Critical RCE and Credential Theft Vulnerabilities in Belgian eID Middleware (Fedict/eid-mw) Impacting Banks and Government Systems
Cybersecurity Incident Analysis
Beacon CRM Data Breach Exposes Personal Data of Over 1,000 UK Charities in AWS Credential Compromise
Technology
AmnesiaStealer macOS Malware: Advanced Browser Session Hijacking via Remote Control and GitHub Supply Chain Attacks
Cybersecurity Incident Analysis
Wesco Cloud CRM Data Breach: ExfilSquad Data Theft and Supply Chain Risks Analyzed
Cybersecurity Incident Analysis
Iranian-Linked Cyberattacks Target U.S. Municipal Water and Wastewater Systems: 2026 Multistate Incident Analysis
CVE Analysis Center
Critical CVE Analysis: Malicious SIM Card Code Execution Vulnerability in Quectel and Qualcomm-Based Cellular IoT Devices
Cybersecurity Incident Analysis