Back to Blog
123 posts in this category
vulnerability
123 posts
Microsoft Entra ID CVSS 10 RCE is a trust-plane warning
Microsoft Entra ID CVSS 10 RCE is a trust-plane warning Security teams should treat CVE-2026-69836 as a serious [vulnerability](https://invaders.ie/resources/gl...
Last updated on 23/08/2026 at 8:59 PM
7 min read
Lucas Oliveira
Research
CISA Warns of Active Exploitation in Zimbra Collaboration Suite
CISA Warns of Active Exploitation in Zimbra Collaboration Suite CISA has added CVE-2026-73570, an operating-system command injection flaw in Zimbra Collaboratio...
Last updated on 23/08/2026 at 8:05 AM
4 min read
Lucas Oliveira
Research
CVE-2026-24301: Microsoft Copilot CoSnitch Data Exposure
CVE-2026-24301: Microsoft Copilot CoSnitch Data Exposure CVE-2026-24301 is a newly published Microsoft Copilot vulnerability that turns a familiar enterprise ri...
Last updated on 19/08/2026 at 2:05 PM
4 min read
Lucas Oliveira
Research
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide | 2026 Executive Summary Since August 18, 2026, the critical CVE-2026-33824 vulnerability in Microsof...
Last updated on 19/08/2026 at 2:03 PM
7 min read
Lucas Oliveira
Research
GitLab ships critical GraphQL patch for self-managed instances
GitLab ships critical GraphQL patch for self-managed instances GitLab has released an out-of-band security update for Community Edition and Enterprise Edition a...
Last updated on 18/08/2026 at 8:06 AM
4 min read
Lucas Oliveira
Research
macOS Screen Sharing CVE-2026-65400 exploited to gain root and deploy Monero miners
macOS Screen Sharing CVE-2026-65400 exploited to gain root and deploy Monero miners Executive Summary Threat actors are exploiting CVE-2026-65400, a recently pa...
Last updated on 17/08/2026 at 12:12 PM
5 min read
Lucas Oliveira
Research
SharePoint JWT Bypass Turns Patch Delay Into an Identity Risk
SharePoint JWT Bypass Turns Patch Delay Into an Identity Risk Attackers have started targeting a critical Microsoft SharePoint Server authentication bypass afte...
Last updated on 17/08/2026 at 1:02 PM
6 min read
Lucas Oliveira
Research
VMware vCenter RCE exploitation turns syslog exposure into persistence risk
VMware vCenter RCE exploitation turns syslog exposure into persistence risk VMware vCenter administrators should treat CVE-2026-59310 as more than a routine [vu...
Last updated on 16/08/2026 at 2:19 PM
6 min read
Lucas Oliveira
Research
SAP Commerce Cloud CVE-2026-58231 Is a Reminder That Patch Windows Are Now Measured in Days
SAP Commerce Cloud CVE-2026-58231 Is a Reminder That Patch Windows Are Now Measured in Days SAP's August Patch Day shipped a maximum-severity fix for SAP Commer...
Last updated on 16/08/2026 at 8:05 AM
6 min read
Lucas Oliveira
Research
Metabase zero-day turns BI dashboards into a data-exposure path
Metabase zero-day turns BI dashboards into a data-exposure path Metabase has confirmed active exploitation of CVE-2026-72898, a critical unauthenticated [SQL in...
Last updated on 15/08/2026 at 1:46 PM
6 min read
Lucas Oliveira
Research
Swiss SharePoint breach shows why patching alone may not end the incident
Swiss SharePoint breach shows why patching alone may not end the incident Switzerland's federal IT office has confirmed a cyberattack against SharePoint servers...
Last updated on 09/08/2026 at 8:07 AM
6 min read
Lucas Oliveira
Research
Gitea Org-mode flaw turns public repositories into a server file-read risk
Gitea Org-mode flaw turns public repositories into a server file-read risk Gitea administrators have a critical patch to verify. The project has fixed CVE-2026-...
Last updated on 08/08/2026 at 8:06 AM
6 min read
Lucas Oliveira
Research