Rescana Blog
1243 posts | Page 9 of 52
Active Exploitation Alert
Active Exploitation Alert: Fake Open-Source Software Sites Dominate Google Search to Distribute Malware via Advanced TDS
Active Exploitation Alert
Active Exploitation Alert: Critical VS Code Zero-Day Enables One-Click GitHub Token Theft and Massive Internal Repository Breach
Cybersecurity Incident Analysis
Miasma Supply Chain Attack Compromises Red Hat @redhat-cloud-services npm Packages With Credential-Stealing Worm: Cybersecurity Incident Analysis and Mitigation
Cybersecurity Incident Analysis
Critical Supply Chain Attack Compromises 32 Red Hat @redhat-cloud-services NPM Packages with Credential-Stealing Malware
Active Exploitation Alert
Active Exploitation Alert: Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
Active Exploitation Alert
Active Exploitation Alert: Microsoft Windows and Defender Zero-Day Vulnerabilities Trigger Global Backlash Amid Legal Threats to Security Researchers
Service Disruption Analysis
GlassWorm Malware Takedown: Disruption of Developer Supply Chain Attacks Targeting VSCode, npm, Python, and GitHub
CVE Analysis Center
CVE-2026-41241: Critical Stored XSS in Pretalx Conference Platform Allows Attackers 100% Talk Acceptance (Patched in 2026.1.0)
CVE Analysis Center
CVE-2026-27771: Critical Gitea Container Registry Vulnerability Exposes Private Images to Unauthenticated Attackers
Active Exploitation Alert
Active Exploitation Alert: GPU Mining Malware Targeting Windows Systems via SEO Poisoning and AI Chatbot Recommendations
Active Exploitation Alert
Active Exploitation Alert: Grandoreiro Banking Trojan and BTMOB RAT Targeting Windows and Android Users in Global Financial Malware Campaigns
Active Exploitation Alert
Active Exploitation Alert: AI-Assisted Zero-Day Targeting Erlang SSH Library (CVE-2025-32433) Outpaces Vulnerability Scanners
Cybersecurity Incident Analysis
2026 Mexican Government Data Breach Analysis: Chronus Group Attack Exposes 36 Million Citizens via Legacy and Third-Party Systems
Active Exploitation Alert
TrapDoor Supply Chain Attack Actively Exploiting npm, PyPI, and CratesIO to Steal Developer Credentials in Crypto, DeFi, Solana, and AI Sectors
Cybersecurity Incident Analysis
Radiology Associates of Richmond Data Breach Exposes PHI, PII, and Financial Data of 266,000 Individuals – Cybersecurity Incident Analysis
Cybersecurity Incident Analysis
Oncology Institute Data Breach 2026: Third-Party Vendor Compromise Exposes Patient Data in Kroll-Administered Systems
Active Exploitation Alert
Active Exploitation of CVE-2026-5426 in KnowledgeDeliver LMS Enables Godzilla (BLUEBEAM) Web Shell and Cobalt Strike Attacks
Active Exploitation Alert
Active Exploitation Alert: Lazarus Group Targets Financial and Crypto Firms with RemotePE Memory-Only RAT
Active Exploitation Alert
Active Exploitation Alert: Ghost CMS CVE-2026-26980 Mass Attack Hijacks 700+ Sites for ClickFix Malware Campaigns
Cybersecurity Incident Analysis
DocketWise Data Breach 2026: Credential Compromise Exposes Sensitive Client Data in Immigration Case Management Platform
Cybersecurity Incident Analysis
Megalodon Supply Chain Attack: TeamPCP Compromises 5,561 GitHub Repositories via Malicious CI/CD Workflows
Cybersecurity Incident Analysis
First VPN Takedown: Operation Saffron Dismantles Criminal VPN Used by 25 Ransomware Groups (2014–2026)
Active Exploitation Alert
Critical Active Exploitation Alert: CVE-2026-48172 in LiteSpeed cPanel Plugin Enables Root Privilege Escalation
Active Exploitation Alert