56 posts with this tag

#Incident Response

56 posts

U-Boot FIT signature flaws expose a fragile pre-OS trust boundary

U-Boot FIT signature flaws expose a fragile pre-OS trust boundary Firmware security company Binarly has disclosed six vulnerabilities in U-Boot's FIT signature...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path

vulnerability

CVE

Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path

Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path Microsoft has released a fix for CVE-2026-50656, the Microsoft Defender vulnerability p...

Last updated on 17/08/2026 at 12:56 PM

7 min read

Lucas Oliveira

Research

Unpatched Tenda router backdoor turns home gateways into a trust problem

vulnerability

CVE

Unpatched Tenda router backdoor turns home gateways into a trust problem

Unpatched Tenda router backdoor turns home gateways into a trust problem CERT/CC has disclosed an undocumented authentication backdoor in several Tenda router f...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

CISA's July KEV batch puts Joomla page builders and Langflow on emergency patch lists

vulnerability

CVE

CISA's July KEV batch puts Joomla page builders and Langflow on emergency patch lists

CISA's July KEV batch puts Joomla page builders and Langflow on emergency patch lists CISA added three vulnerabilities to its Known Exploited Vulnerabilities ca...

Last updated on 08/07/2026 at 8:06 AM

7 min read

Lucas Oliveira

Research

Adobe ColdFusion CVE-2026-48282 moves from patch advisory to active exploitation

vulnerability

CVE

Adobe ColdFusion CVE-2026-48282 moves from patch advisory to active exploitation

Adobe ColdFusion CVE-2026-48282 moves from patch advisory to active exploitation Adobe ColdFusion administrators have a narrow patch window for CVE-2026-48282,...

Last updated on 07/07/2026 at 8:06 AM

6 min read

Lucas Oliveira

Research

Cybercrime

ransomware

Supply Chain

Vect and TeamPCP show how stolen build secrets become ransomware access

Vect and TeamPCP show how stolen build secrets become ransomware access Sophos says two cybercrime groups, Vect and TeamPCP, have formalized a partnership that...

Last updated on 05/07/2026 at 8:07 AM

7 min read

Lucas Oliveira

Research

Cybercrime

ransomware

AI Security

JADEPUFFER shows how agentic AI can turn exposed Langflow into ransomware

JADEPUFFER shows how agentic AI can turn exposed Langflow into ransomware Sysdig has documented what it assesses as one of the first clear examples of agentic r...

Last updated on 04/07/2026 at 7:47 PM

6 min read

Lucas Oliveira

Research

CitrixBleed-style NetScaler flaw CVE-2026-8451 is already being tested in the wild

vulnerability

CVE

Citrix

CitrixBleed-style NetScaler flaw CVE-2026-8451 is already being tested in the wild

CitrixBleed-style NetScaler flaw CVE-2026-8451 is already being tested in the wild Citrix NetScaler administrators have another edge-appliance exposure to triag...

Last updated on 04/07/2026 at 8:04 AM

5 min read

Lucas Oliveira

Research

SharePoint CVE-2026-45659 active exploitation puts on-prem servers on urgent patch path

vulnerability

CVE

Microsoft

SharePoint CVE-2026-45659 active exploitation puts on-prem servers on urgent patch path

SharePoint CVE-2026-45659 active exploitation puts on-prem servers on urgent patch path Microsoft SharePoint Server is back in the active-exploitation lane. CIS...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

Progress Kemp LoadMaster CVE-2026-8037 exploitation moves fast after public PoC

vulnerability

CVE

Progress

Progress Kemp LoadMaster CVE-2026-8037 exploitation moves fast after public PoC

Progress Kemp LoadMaster CVE-2026-8037 exploitation moves fast after public PoC Progress Kemp LoadMaster appliances are now in the familiar danger zone for edge...

Last updated on 17/08/2026 at 12:56 PM

7 min read

Lucas Oliveira

Research

SimpleHelp CVE-2026-48558 exploitation turns RMM into a credential-theft path

vulnerability

CVE

SimpleHelp

SimpleHelp CVE-2026-48558 exploitation turns RMM into a credential-theft path

SimpleHelp CVE-2026-48558 exploitation turns RMM into a credential-theft path SimpleHelp has moved from patched vulnerability to active intrusion path. Attacker...

Last updated on 17/08/2026 at 12:56 PM

9 min read

Lucas Oliveira

Research

Oracle E-Business Suite CVE-2026-46817 is now an active exploitation risk

vulnerability

CVE

Oracle

Oracle E-Business Suite CVE-2026-46817 is now an active exploitation risk

Oracle E-Business Suite CVE-2026-46817 is now an active exploitation risk Oracle E-Business Suite has another critical exposure that defenders should move out o...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

1 2 3 4 5

#Incident Response

U-Boot FIT signature flaws expose a fragile pre-OS trust boundary

Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path

Unpatched Tenda router backdoor turns home gateways into a trust problem

CISA's July KEV batch puts Joomla page builders and Langflow on emergency patch lists

Adobe ColdFusion CVE-2026-48282 moves from patch advisory to active exploitation

Vect and TeamPCP show how stolen build secrets become ransomware access

JADEPUFFER shows how agentic AI can turn exposed Langflow into ransomware

CitrixBleed-style NetScaler flaw CVE-2026-8451 is already being tested in the wild

SharePoint CVE-2026-45659 active exploitation puts on-prem servers on urgent patch path

Progress Kemp LoadMaster CVE-2026-8037 exploitation moves fast after public PoC

SimpleHelp CVE-2026-48558 exploitation turns RMM into a credential-theft path

Oracle E-Business Suite CVE-2026-46817 is now an active exploitation risk

Tags