Rescana Blog
1092 posts | Page 20 of 46
Active Exploitation Alert
APT37 Exploits Google Find Hub to Wipe Android Devices in Targeted South Korean Attacks
Active Exploitation Alert
Trojanized ESET AV Remover Installers Spread Kalambur Backdoor in Targeted Phishing Attacks on Ukrainian Systems
Active Exploitation Alert
Samsung Galaxy Zero-Day (CVE-2025-21042) Exploited to Deploy LANDFALL Android Spyware via WhatsApp DNG Images
Cybersecurity Incident Analysis
Microsoft Exposes Whisper Leak Side-Channel Attack: Topic Inference Vulnerability in Encrypted LLM Chat Traffic
Active Exploitation Alert
Malicious NuGet Packages Plant Time-Delayed Logic Bombs Targeting .NET Database and ICS Systems
Active Exploitation Alert
Landfall Android Spyware Exploits CVE-2025-21042 Zero-Day to Target Samsung Galaxy Devices via WhatsApp
Active Exploitation Alert
GlassWorm Malware Resurfaces: 3 Malicious VSCode Extensions Discovered on OpenVSX Supply Chain
Active Exploitation Alert
Evolving ClickFix Attacks Targeting macOS: Social Engineering, Multi-Platform Payloads, and Credential Theft
Active Exploitation Alert
Congressional Budget Office (CBO) Cisco ASA Firewall Breach: Cyberattack Details, Impact, and Security Measures Implemented
Active Exploitation Alert
Cisco ASA and FTD Firewall Vulnerabilities: Active Exploitation of CVE-2025-20333 and CVE-2025-20362 Enables DoS Attacks and Full Device Compromise
Cybersecurity Incident Analysis
Hyundai AutoEver America Data Breach Exposes Sensitive Personal Information in 2025
Cybersecurity Incident Analysis
SesameOp Malware Exploits OpenAI API for C2 in Microsoft Visual Studio Attacks
Cybersecurity Incident Analysis
Operation SkyCloak: Tor-Enabled OpenSSH for Windows Backdoor Targets Defense and Military Sectors in Eastern Europe
Cybersecurity Incident Analysis
Nikkei Slack Data Breach Exposes Personal Information of 17,000 Employees and Partners: Incident Analysis and Mitigation Strategies
Cybersecurity Incident Analysis
Kimsuky Deploys HTTPTroy Backdoor to Target Windows Systems in South Korea via VPN Invoice Phishing Campaign
Cybersecurity Incident Analysis
Eurojust-Led Operation Disrupts €600 Million Cryptocurrency Investment Fraud Network Exploiting Fake Platforms Across Europe
Cybersecurity Incident Analysis
CVE-2025-11953: Critical OS Command Injection Vulnerability in React Native Community CLI’s Metro Development Server Allows Remote Code Execution
Cybersecurity Incident Analysis
Apache OpenOffice Disputes Akira Ransomware Data Breach Claims: No Evidence Found of Compromise
Active Exploitation Alert
University of Pennsylvania PennKey SSO Breach Exposes 1.2 Million Donor Records in Major Data Leak
Active Exploitation Alert
Remote Monitoring and Management (RMM) Tools Exploited in Logistics and Freight Cyberattacks – Rescana Threat Intelligence Report
Active Exploitation Alert
Microsoft Uncovers SesameOp Malware: OpenAI Assistants API Abused for Stealthy Command-and-Control Operations
Active Exploitation Alert
Jabber Zeus Banking Trojan: Ukrainian Developer Extradited to US for Major Windows-Based Cybercrime Operation
Active Exploitation Alert
HttpTroy Backdoor Targets Windows Systems via Fake VPN Invoice in Kimsuky Cyberattack on South Korea
Active Exploitation Alert