Rescana Blog
1283 posts | Page 6 of 54
Service Disruption Analysis
Critical Service Disruption Analysis: Zero-Day Vulnerabilities (CVE-2026-2699 & CVE-2026-2701) Impacting Progress ShareFile Storage Zones Controller v5.x
Cybersecurity Incident Analysis
Nihon Kotsu Cyberattack Analysis: Malware Disruption of Japan’s Largest Taxi Dispatch and Reservation Systems in July 2026
General News
U.S. Sanctions First VPN Service (1VPNS) and Belarusian Cryptor Provider for Enabling Ransomware Attacks
Active Exploitation Alert
Active Exploitation Alert: 148 Malicious npm Packages Masquerading as Student Proxies Turn Browsers Into DDoS Botnet
Active Exploitation Alert
Active Exploitation Alert: Jscrambler npm Packages Compromised in Coordinated Supply Chain Attack (July 2026)
Active Exploitation Alert
Active Exploitation Alert: ShinyHunters Abuse OAuth and Vendor Integrations to Breach Salesforce and SaaS Environments
Email Security
Misconfigured Server Exposes Evilginx Phishing Campaigns Bypassing MFA to Target Microsoft 365 Accounts
Cybersecurity Incident Analysis
Centers Laboratory Data Breach Analysis: 540,000 Patient Records Exposed by Worldleaks in 2025 Cyberattack
Active Exploitation Alert
Active Exploitation Alert: Critical Joomla Extension Vulnerabilities Enable Remote Code Execution and Server Compromise
CVE Analysis Center
Critical CVE-2026-2699 and CVE-2026-2701 Vulnerabilities Force Immediate Shutdown of Progress ShareFile Storage Zone Controller v5.x
CVE Analysis Center
Critical U-Boot FIT Signature Verification Vulnerabilities (CVE-2026-46728) Expose Embedded Linux Devices to Stealthy Firmware Attacks
Technology
Ghostcommit: Multimodal Prompt Injection Attack Exposes AI Code Review Tools to Supply Chain Risks
Technology
Unpatched XRING Vulnerability in XQUIC Exposes HTTP/3 Servers to Remote Crash Risk
Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2026-20896 Authentication Bypass in Gitea Docker Image Exposes Repositories and Secrets
Active Exploitation Alert
Active Exploitation Alert: WP-SHELLSTORM Campaign Mass-Compromises WordPress Sites via Plugin Vulnerabilities
CVE Analysis Center
Rogue Agent Vulnerability in Google Dialogflow CX Playbooks Exposes AI Agents to Code Injection and Data Exfiltration
Cybersecurity Incident Analysis
KDDI Email System Data Breach Exposes Over 12 Million Credentials Across Six Major Japanese ISPs
Cybersecurity Incident Analysis
Accenture Azure DevOps Data Breach Analysis: Source Code and Credentials Exposed in July 2026 Cyberattack
Cybersecurity Incident Analysis
Union County, Ohio Government Pays $1 Million Bitcoin Ransom to Kairos Cyber Extortion Group After Data-Only Attack
Active Exploitation Alert
Active Exploitation Alert: Prompt Injection Vulnerability in GitHub Agentic Workflows Threatens Software Supply Chain Security
Active Exploitation Alert
Active Exploitation Alert: Citrix NetScaler ADC & Gateway Vulnerability (CVE-2023-4966) CitrixBleed-ing Again Under Massive Attack
Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2024-12356 Authentication Bypass and RCE in BeyondTrust Remote Support and PRA
Active Exploitation Alert
Active Exploitation Alert: Critical Gitea Docker Authentication Bypass Vulnerability (CVE-2026-20896) Under Attack
Active Exploitation Alert