Technology ❯ Cybersecurity ❯ Incident Response

Vulnerability Disclosure

Google Vulnerability Reward Program Rapid7 CoreCloud Tech Post-Mortem Analysis Tenable Reporting Exploitation Responsible Disclosure

CISA Puts Actively Exploited Gogs RCE on KEV, Orders Federal Fix by Feb. 2

The flaw is a symlink-based path traversal in Gogs’ PutContents API that attackers have abused for months.

Trend Micro Patches Critical Apex Central RCE as Public Exploits Surface

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor

Fina CA Mis-Issued 12 TLS Certificates for Cloudflare’s 1.1.1.1, Now Revoked

Trend Micro Releases Mitigation Tool for Critical Apex One Zero-Days

Google Patches Account Recovery Flaw That Exposed Users’ Phone Numbers