Rescana Blog
1296 posts | Page 3 of 54
Active Exploitation Alert
Active Exploitation Alert: ToxicPanda 2.0 and GoldDigger Banking Malware Escalate On-Device Fraud Against Android Users Globally
Active Exploitation Alert
Active Exploitation of MLflow SSRF Vulnerability (CVE-2026-64849) Enables Cloud Credential Theft and Account Compromise
Cybersecurity Incident Analysis
Massive Azure/Entra Credential Theft Exposes Fortune 500 Employee Directories in Global Exfiltration Campaign
CVE Analysis Center
Critical Command Injection Vulnerability in Snowflake snowflake-connector-net GitHub Actions Exposes Jira Credentials
CVE Analysis Center
CVE-2026-19478: Critical GitLab CE/EE GraphQL Vulnerability Enables Remote Deletion of Public Projects and User Data
Cybersecurity Incident Analysis
RingCentral Data Breach Analysis: 1.6 Million Records Compromised in ShinyHunters Social Engineering Attack
Cybersecurity Incident Analysis
SafePal Order-Tracking Plugin Data Breach Exposes 39,798 Customers to Phishing Risk
CVE Analysis Center
Critical RCE and Credential Theft Vulnerabilities in Belgian eID Middleware (Fedict/eid-mw) Impacting Banks and Government Systems
Cybersecurity Incident Analysis
Beacon CRM Data Breach Exposes Personal Data of Over 1,000 UK Charities in AWS Credential Compromise
Cybersecurity Incident Analysis
Trezor Data Breach Analysis: 14,000 Customers Exposed in ShipMonk Metabase SQL Injection Incident
Technology
AmnesiaStealer macOS Malware: Advanced Browser Session Hijacking via Remote Control and GitHub Supply Chain Attacks
Service Disruption Analysis
Threema Service Disruption Analysis: Large-Scale DDoS Attacks Impact Secure Messaging Platform in August 2026
Cybersecurity Incident Analysis
Iranian-Linked Cyberattacks Target U.S. Municipal Water and Wastewater Systems: 2026 Multistate Incident Analysis
CVE Analysis Center
Critical CVE Analysis: Malicious SIM Card Code Execution Vulnerability in Quectel and Qualcomm-Based Cellular IoT Devices
Cybersecurity Incident Analysis
Ceva Logistics Cyberattack Disrupts European Warehouses and Exposes Customer Data: Cybersecurity Incident Analysis
Cybersecurity Incident Analysis
Wesco Cloud CRM Data Breach: ExfilSquad Data Theft and Supply Chain Risks Analyzed
Active Exploitation Alert
Active Exploitation Alert: Coruna and DarkSword iOS Exploit Chains Target Apple Devices Globally
Active Exploitation Alert
Active Exploitation Alert: Critical Microsoft SharePoint CVE-2026-50522 Vulnerability Targeted in Global Attacks
Technology
Pass-ta-key Attacks Expose Google Chrome and Password Manager on Windows to Passkey Theft and MFA Bypass
Cybersecurity Incident Analysis
2026 Cyberattack Analysis: Iranian-Linked Threats Target Internet-Exposed OT Systems at New Jersey and Alabama Water Utilities
Cybersecurity Incident Analysis
Static Tundra Cyberattack on Polish Energy Sector: Exploiting FortiGate VPN and OT Credential Weaknesses in December 2025
Technology
Atlassian Rovo AI Prompt Injection Vulnerabilities Expose Jira and Confluence Data to Remote Attacks
Active Exploitation Alert
Critical Metabase Zero-Day Exploited in the Wild: Unauthenticated Admin Access and Data Exposure Alert
Cybersecurity Incident Analysis