Rescana Blog
1283 posts | Page 5 of 54
Email Security
Kratos Phishing Kit Dismantled: Microsoft 365 Session Theft and MFA Bypass Operation Analysis
Cybersecurity Incident Analysis
Coca-Cola’s Fairlife US Production Disrupted by Ransomware Attack: Incident Analysis and Sector Impact 2026
Blog posts
The Mirage of Catch-Up
Cybersecurity Incident Analysis
Ostium DeFi Platform Breach: $23.75 Million Stolen in Off-Chain Oracle Attack and Credential Compromise
Cybersecurity Incident Analysis
Estée Lauder Data Breach Analysis: Oracle E-Business Suite CVE-2025-61882 Exploitation by Clop Ransomware
Active Exploitation Alert
Active Exploitation Alert: FakeGit Campaign Abuses 7,600 GitHub Repositories to Distribute SmartLoader and Lumma Stealer Malware via Open-Source Supply Chain
Cybersecurity Incident Analysis
Romania ANCPI Land Registry Wiped in Credential-Based Cyberattack: Incident Analysis and Mitigation Recommendations
CVE Analysis Center
CVE-2026-14266: Critical 7-Zip XZ Archive Decoder Vulnerability Enables Remote Code Execution (Patch in 26.02)
Cybersecurity Incident Analysis
AI-Driven Cyberattack Compromises Hugging Face Production Infrastructure via Autonomous Agent: Incident Analysis and Mitigation
Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2026-6875 Remote Code Execution Vulnerability in ServiceNow AI Platform
Active Exploitation Alert
Active Exploitation Alert: Critical NGINX Vulnerabilities (CVE-2026-42533, CVE-2026-42945) Enable Remote Code Execution and Worker Crashes
Active Exploitation Alert
Active Exploitation Alert: WP2Shell Critical WordPress Core Vulnerabilities (CVE-2026-63030 & CVE-2026-60137) Enable Unauthenticated RCE in the Wild
CVE Analysis Center
Critical wp2shell CVEs Enable Unauthenticated Remote Code Execution in WordPress Core (CVE-2026-63030, CVE-2026-60137)
Cybersecurity Incident Analysis
Abbott Laboratories Cybersecurity Breach Analysis: ShinyHunters Attack on Exact Sciences Systems and ShadowByt3$ LabCentral Portal Incident
Cybersecurity Incident Analysis
Ernst & Young Data Breach Analysis: Third-Party IT Support Platform Compromise Exposes Client Tax and Financial Information
Active Exploitation Alert
Active Exploitation Alert: Surge in ACR Stealer Malware Targeting Microsoft 365, OneDrive, SharePoint, and Edge Users
Active Exploitation Alert
Active Exploitation Alert: Unauthenticated RCE Vulnerabilities in WordPress Core (wp2shell) with Public Exploits – Immediate Patching Required
Cybersecurity Incident Analysis
Spanish National Police Dismantle €140 Million BEC and Investment Fraud Cybercrime Ring Targeting Financial Institutions and Businesses
Technology
Critical Windows 10, 11, and Server Zero-Day: 'LegacyHive' Exploit Enables Privilege Escalation via User Profile Service Vulnerability
Active Exploitation Alert
Active Exploitation Alert: Google Gemini CLI Abused for Botnet Operations and Malware Deployment
CVE Analysis Center
Chrome 150 and Firefox 152 Patch Critical Vulnerabilities: CVE Analysis and Enterprise Risk Advisory
Technology
Gold Eagle Initiative: How AI Is Transforming Vulnerability Coordination and Cybersecurity Across Government and Industry
Active Exploitation Alert
Active Exploitation Alert: AsyncAPI npm Supply Chain Attack Delivers Multi-Stage Miasma Botnet via Compromised GitHub Actions
Active Exploitation Alert