rescana.com

Critical CVE-2026-89111 SSRF Vulnerability in SAP Cloud SDK for Python Threatens SAP BTP OAuth2 Security

CVE-2026-89111 is a critical SSRF vulnerability affecting the SAP Cloud SDK for Python. The vulnerability arises from improper validation of the tenant_subdomain parameter during OAuth2 token requests ...
rescana.com

TFG London Cyberattack Disrupts IT Systems and Online Services at Phase Eight, Hobbs, and Whistles Brands – October 2026 Incident Analysis

The incident affecting TFG London was detected on October 11, 2026, and publicly disclosed on October 13, 2026 (BleepingComputer, BBC, Shattered.io). The attack specifically targeted IT systems and ...
rescana.com

Ivanti Connect Secure Zero-Day Exploit Chain Enables Root-Level RCE and Credential Theft on Fully Patched VPN Appliances

A sophisticated zero-day exploit chain targeting Ivanti Connect Secure VPN appliances has been observed in the wild, enabling unauthenticated attackers to achieve root-level remote code execution (RCE ...
rescana.com

Cisco Secure Email Gateway CVE-2026-76519: Actively Exploited File Write Flaw Added to CISA KEV

Cisco has disclosed CVE-2026-76519, a critical arbitrary file write vulnerability in the Advanced Malware Protection (AMP) File Reputation handling of Cisco Secure Email Gateway (SEG). An ...
rescana.com

Insider Espionage at OpenAI: Cyber-Physical Attack Using Hidden Audio Recording Devices Highlights AI Sector Security Risks

On October 9, 2026, the United States Department of Justice announced the arrest of a 35-year-old Saudi national and engineer at OpenAI for installing a surreptitious audio recording device within the ...