Rescana Blog
1283 posts | Page 9 of 54
Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2026-42945 NGINX Rift Vulnerability in NGINX and F5 Products—Patch Immediately
Active Exploitation Alert
DragonForce Hackers Exploit Microsoft Teams TURN Relays to Conceal Backdoor.Turn C2 in Targeted Ransomware Attacks
Cybersecurity Incident Analysis
iRhythm Technologies Data Breach Exposes Patient Information in Cardiac Monitoring Systems – June 2024 Cybersecurity Incident Analysis
Technology
Windows SprySOCKS Malware: Advanced Kernel-Level Rootkit Targets Government Organizations via Supply Chain Vulnerabilities
Active Exploitation Alert
Active Exploitation Alert: North Korean APT37 Uses Fake Microsoft Account Alerts and LNK Files to Deploy NarwhalRAT Malware on Windows Systems
Cybersecurity Incident Analysis
Ransomware Attack on Mackay Sugar Disrupts Australian Mills: Cybersecurity Incident Analysis and Lessons Learned
CVE Analysis Center
Critical CVE-2026-48558 Vulnerability in SimpleHelp Allows Unauthorized Privileged Account Creation via OIDC Authentication Bypass
CVE Analysis Center
CVE-2025-32711: Zero-Click 'EchoLeak' Vulnerability in Microsoft 365 Copilot Enables Stealth Data Exfiltration via Prompt Injection
Cybersecurity Incident Analysis
Atomic Arch Supply Chain Attack Compromises 1,500 Arch User Repository Packages: Credential-Stealing Malware Targets Arch Linux Systems
Active Exploitation Alert
Critical LiteLLM Vulnerability Chain Enables Remote Code Execution and Full AI Gateway Server Takeover (CVE-2026-42271, CVE-2026-47101, CVE-2026-47102, CVE-2026-40217)
Technology
NPM 12 Redefines Script Execution and Dependency Security to Combat JavaScript Supply Chain Attacks
Active Exploitation Alert
ShinyHunters Exploits Oracle PeopleSoft Zero-Day CVE-2026-35273 in Widespread Higher Education Cyberattack
Service Disruption Analysis
Maine Data Breach Notification Portal Disabled After Fake Discord and VRChat Reports – Service Disruption Analysis
Cybersecurity Incident Analysis
Handala Cyberattack Claims: Iranian Group Targets California Water Utility Billing Systems in Bakersfield, Visalia, and Chico
Active Exploitation Alert
Active Exploitation Alert: Google Chrome 149 Critical Vulnerabilities Patched Amid Ongoing CVE-2026-11645 Attacks
Technology
GitHub Enhances npm Security with Mandatory 2FA and Provenance to Combat Supply Chain Attacks
Cybersecurity Incident Analysis
OceanLotus (APT32) Supply Chain Attack: SPECTRALVIPER Backdoor Targets FireAnt Platform and Vietnamese Infrastructure
Technology
OnyxC2 Stealer: Advanced Malware-as-a-Service Threatens Enterprise Security and Supply Chain Integrity in 2026
Active Exploitation Alert
Oracle PeopleSoft PeopleTools Zero-Day (CVE-2026-35273) Actively Exploited: Urgent Patch Required to Prevent Ransomware and Data Breaches
Technology
GitHub Disables npm Install Scripts by Default in v12 to Prevent JavaScript Supply Chain Attacks
Active Exploitation Alert
Gentlemen Ransomware Actively Exploiting Fortinet FortiGate Vulnerabilities: 478 Victims Hit by Rapid Worm-Like Attacks
Compliance
CISA BOD 26-04: Risk-Based Vulnerability Management and Patch Prioritization Requirements for Federal Agencies and Third-Party Systems
Cybersecurity Incident Analysis
ServiceNow API Security Incident Exposes Customer Data: Analysis of Unauthenticated Access Vulnerability (June 2026)
Cybersecurity Incident Analysis