Resecurity
Please support the site operations by clicking ads.
Session Cookie Authentication Bypass: Predictable Signing Secret Enableds Account Impersonations
CISA KEV Alert: Cisco, Citrix, and Fortinet Vulnerabilities Under Active Exploitation
CVE-2026-65400: macOS Screen Sharing Authentication Bypass Under Active Exploitation
Ray CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding
The LiteLLM Supply-Chain Attack — TeamPCP “SANDCLOCK” CI/CD Credential-Harvesting Campaign via a Backdoored Trivy GitHub Action
Metabase Zero-Day Exploited in the Wild: Unauthenticated SQL Injection Leading to Full Admin Access
ExfilSquad Targets New Victims, Shares Data via Torrents
CVE-2026-16812: Critical Command Injection in Arista VeloCloud Orchestrator
Inside OWAReaper: How CVE-2026-42897 Enables Persistent Exchange Mailbox Compromise
From WSProxy to Root: INC ransomware and SonicWall SMA Exploit Chain
When AI Becomes the Attacker: Understanding Autonomous Offensive Security Agents
Exploiting Langflow's validate_code() Endpoint for Remote Code Execution
From Web Request to Domain Compromise: Understanding the July 2026 SharePoint Attacks
Artificial Intelligence Safety Law: Landmark Industry Regulation Bill
CVE-2026-48282: Adobe ColdFusion RDS Path Traversal Leading to RCE
Reconnaissance in the Age of AI: Exploring Modern ML Infrastructure
CVE-2026-20253: Splunk Enterprise Pre-Authentication Remote Code Execution
Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise
The Anubis Ransomware Attack on the Adriatic Port Authority
Blog