Rescana Blog
1283 posts | Page 8 of 54
Active Exploitation Alert
Active Phishing Campaign Exploits Calendly and Photo ZIP Files to Target Hotels with Node.js Malware – Microsoft Alerts Hospitality Sector
CVE Analysis Center
Critical CVE-2026-39118 Vulnerability in macOS Allows Users to Disable Kandji MDM and CrowdStrike EDR Security Agents
CVE Analysis Center
CVE-2026-0934: Incorrect Authorization Vulnerability in GitLab EE Allows Unauthorized Management of Protected Environments
CVE Analysis Center
CVE-2026-10086: High-Severity XSS Vulnerability in GitLab Enterprise Edition Analytics Dashboard – Analysis, Impact, and Mitigation Steps
CVE Analysis Center
CVE-2026-13311 Analysis: High-Severity Denial of Service Vulnerability in Node.js shell-quote Package (Versions ≤1.8.4)
CVE Analysis Center
CVE-2026-1606: Code Injection Vulnerability in GitLab CE/EE Snippets – Affected Versions, Risks, and Remediation Steps
General News
2026 FIFA World Cup Digital Platforms Face Surge in Sophisticated Cyber Threats and Fraud
Technology
GitHub Actions Updates Checkout to Block Forked Pull Request Supply Chain Attacks in CI/CD Workflows
Active Exploitation Alert
Active Exploitation Alert: Cisco Catalyst SD-WAN Zero-Day (CVE-2026-20245) Enables Root Access via Authenticated File Upload Exploit
Active Exploitation Alert
Active Exploitation Alert: Stealthy Mistic Backdoor Targets Enterprise Networks via KongTuke Ransomware Access Broker
Active Exploitation Alert
Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Actively Exploited for Root Access and Management Plane Compromise
Active Exploitation Alert
FortiBleed Credential Harvesting Campaign: Active Exploitation of FortiGate Firewalls Compromises Over 110 Million Credentials
Technology
GitHub Actions Enhances CI/CD Security: actions/checkout v7 Blocks Common Pwn Request Attack Patterns
Cybersecurity Incident Analysis
ShapedPlugin Pro WordPress Plugins Supply Chain Attack: Credential Theft, Backdoors, and Mitigation Guidance
Cybersecurity Incident Analysis
Klue OAuth Integration Breach Exposes Salesforce Customer Data in Icarus Supply Chain Attack
Cybersecurity Incident Analysis
Nintendo Employee Data Breach via TinyPulse SaaS: WebMD Subsidiary Cyberattack Analysis and Third-Party Risk Insights
Cybersecurity Incident Analysis
Qilin Ransomware Attack Analysis: Technical Assessment of Q Link Wireless Incident and Sector-Specific Mitigation Strategies
Cybersecurity Incident Analysis
Salesloft Drift OAuth Token Breach Enables Salesforce Data Theft in UNC6395 'Icarus' Attack Campaign (August 2026)
Technology
Prinz Eugen Ransomware Targets Recent Files and Abuses Remote Management Tools: Technical Analysis and Supply Chain Risks
Cybersecurity Incident Analysis
Texas Parks & Wildlife Third-Party Vendor Breach Exposes 3 Million Driver’s Licenses and Passport Numbers
Active Exploitation Alert
Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service
Cybersecurity Incident Analysis
INC Ransomware Incident Analysis: Exploiting Citrix NetScaler and Fortinet Vulnerabilities Through Double Extortion Attacks
CVE Analysis Center
CVE-2026-50656: Microsoft Defender RoguePlanet Zero-Day Enables Local Privilege Escalation on Fully Patched Windows 10 & 11 Systems
CVE Analysis Center