Rescana harnesses agentic AI to simplify third-party and external risk management, putting defenders firmly in control. Our platform discovers, assesses, and remediates risks in real time, enabling ...
CVE-2026-89111 is a critical SSRF vulnerability affecting the SAP Cloud SDK for Python. The vulnerability arises from improper validation of the tenant_subdomain parameter during OAuth2 token requests ...
The incident affecting TFG London was detected on October 11, 2026, and publicly disclosed on October 13, 2026 (BleepingComputer, BBC, Shattered.io). The attack specifically targeted IT systems and ...
The 2026 Oracle Health data breach was a credential-based intrusion targeting legacy Cerner servers. The attacker gained unauthorized access using stolen credentials, a method aligning with the MITRE ...
Rescana's conservative guidance: until Ahsay publishes exact affected builds, treat any v10 build below hotfix 10.3.4.45, and any v7, v8 or v9 build below hotfix 9.15.2.70, as potentially exposed.
The breach of ASOS’s cloud environment represents a sophisticated attack vector, combining elements of credential compromise, cloud infrastructure exploitation, and extortion via direct user ...
A sophisticated zero-day exploit chain targeting Ivanti Connect Secure VPN appliances has been observed in the wild, enabling unauthenticated attackers to achieve root-level remote code execution (RCE ...
The initial unauthorized access began on March 28, 2026, and persisted until April 12, 2026. During this window, the attackers exfiltrated a trove of sensitive documents. EY detected anomalous ...
The breaches affecting South Korean financial institutions in October 2026 represent a notable escalation in the use of AI-powered attack automation against the financial sector. The attacks targeted ...
Cisco has disclosed CVE-2026-76519, a critical arbitrary file write vulnerability in the Advanced Malware Protection (AMP) File Reputation handling of Cisco Secure Email Gateway (SEG). An ...
The breaches at Nikkei Inc. involved two distinct but related incidents of unauthorized access to cloud-based email accounts. The first incident targeted a Microsoft 365 account belonging to a Nikkei ...
The remaining affected clients (up to two) have not been identified. The first tenant disclosure (Daiwa, October 5) came a day before the vendor's own public notice (October 6). No CVE, CISA KEV entry ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results