Rescana Blog
1283 posts | Page 2 of 54
Active Exploitation Alert
APT28’s HOOKEDGE Backdoor Exploiting Microsoft Word Macros to Target European Government and Diplomatic Organizations
Active Exploitation Alert
Cosmos EVM Vulnerability Exploited: Critical Flaw Leads to Multi-Chain Blockchain Attacks and $5.7M Losses
Active Exploitation Alert
Critical Active Exploitation Alert: Unitree G1 EDU Humanoid Robot Vulnerabilities (CVE-2026-76639, CVE-2026-76640) Enable Root RCE via Bluetooth and Chatbot Flaws
CVE Analysis Center
Critical Unpatched Vulnerabilities in Kaltura mwEmbed Expose Organizations to Remote Code Execution and File Read Attacks (CVE-2026-19912, CVE-2026-19913)
CVE Analysis Center
CVE-2026-18963 Analysis: Critical Keycloak Password Reset Vulnerability Allows Unauthenticated Account Takeover
Active Exploitation Alert
Active Exploitation Alert: WordlistLoader Bypasses Security Defenses to Deliver Amatera Stealer Malware on Windows Systems
Active Exploitation Alert
Weedhack Malware Actively Exploiting Minecraft Modding Community via SEO Poisoning and Fake Client Downloads
Technology
ToxicPanda Android Malware Exploits VPN Permissions to Block Google Play and Play Protect: Security Risks and Mitigation Strategies
Active Exploitation Alert
Active Exploitation Alert: Critical GitLab CVE-2026-19478 Code Injection Vulnerability Targets Unpatched Instances
Active Exploitation Alert
Active Exploitation Alert: Critical Supply Chain Attack via 14 Trojanized npm Packages Drops RedC2 4.0 AI-Assisted Linux Backdoor
Technology
CDN Tsunami: Critical HTTP/3 to HTTP/1.1 Protocol Translation Vulnerability Triggers Up to 350x DoS Amplification Across Major CDN Providers
Active Exploitation Alert
Active Exploitation Alert: ToxicPanda 2.0 and GoldDigger Banking Malware Escalate On-Device Fraud Against Android Users Globally
Active Exploitation Alert
Active Exploitation of MLflow SSRF Vulnerability (CVE-2026-64849) Enables Cloud Credential Theft and Account Compromise
Cybersecurity Incident Analysis
Massive Azure/Entra Credential Theft Exposes Fortune 500 Employee Directories in Global Exfiltration Campaign
CVE Analysis Center
Critical Command Injection Vulnerability in Snowflake snowflake-connector-net GitHub Actions Exposes Jira Credentials
CVE Analysis Center
CVE-2026-19478: Critical GitLab CE/EE GraphQL Vulnerability Enables Remote Deletion of Public Projects and User Data
Cybersecurity Incident Analysis
RingCentral Data Breach Analysis: 1.6 Million Records Compromised in ShinyHunters Social Engineering Attack
Cybersecurity Incident Analysis
SafePal Order-Tracking Plugin Data Breach Exposes 39,798 Customers to Phishing Risk
CVE Analysis Center
Critical RCE and Credential Theft Vulnerabilities in Belgian eID Middleware (Fedict/eid-mw) Impacting Banks and Government Systems
Cybersecurity Incident Analysis
Beacon CRM Data Breach Exposes Personal Data of Over 1,000 UK Charities in AWS Credential Compromise
Cybersecurity Incident Analysis
Trezor Data Breach Analysis: 14,000 Customers Exposed in ShipMonk Metabase SQL Injection Incident
Technology
AmnesiaStealer macOS Malware: Advanced Browser Session Hijacking via Remote Control and GitHub Supply Chain Attacks
Service Disruption Analysis
Threema Service Disruption Analysis: Large-Scale DDoS Attacks Impact Secure Messaging Platform in August 2026
Cybersecurity Incident Analysis