Technology ❯ Cybersecurity ❯ Incident Response

Vulnerability Management

Patch Management Security Advisories Red Team Operations CVE-2025-11953 Threat Detection Citrix NetScaler Firmware Updates Security Updates Cisco Product Security Incident Response Team Security Patches Two-Factor Authentication CVE-2025-22225 CISA Recommendations CISA Threat Intelligence Snyk Response Hosting Provider Security OpenSSL

New Analysis Disputes Claims of Pre-Disclosure Telnet Blocking

Terrace Networks says Telnet remains reachable from the named networks, challenging conclusions drawn from GreyNoise’s traffic drop.

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

CISA Says VMware ESXi Escape Flaw Now Used in Ransomware Attacks

Public Exploits Detail n8n Sandbox Escape That Lets Workflow Users Take Over Servers

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

OpenSSL Patches 12 Flaws Found by AISLE in Coordinated January Update

Active Attacks Target Critical Vulnerability in Legacy D-Link DSL Routers

CISA Orders Federal Agencies to Patch Actively Exploited MongoDB ‘MongoBleed’ Flaw

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

WordPress King Addons Flaw Actively Exploited to Create Admin Accounts

‘HashJack’ Exposes AI Browser Weakness as Microsoft and Perplexity Patch, Google Declines

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Active Exploits Target Gladinet CentreStack and TrioFox Zero-Day That Can Lead to RCE

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging

Cisco Urges Customers to Patch Critical RADIUS Flaw in Firewall Management Center

HTTP/2 MadeYouReset Flaw Exposes Servers to DoS Attacks