threataft - DEV Community

threataft

Nov 14

OpenEMR 8.5.0: Twelve CVEs in a Clinical Record System, and Why the Patch Is Half the Response

#security #healthcare #php #webdev

1 min read

threataft

Nov 14

The FBI’s ARTEX Flash: When Noise Stopped Meaning Unsophisticated

#security #ai #cloud #webdev

1 min read

threataft

Nov 13

SilentAir: A State-Level Actor Intercepted SMS 2FA From Inside the Carrier — and the Phone Never Knew

#security #telecom #privacy #infosec

1 min read

threataft

Nov 13

Check Point PHP2Shell Chain: Web Shell, Root, Backdoor, ESXi Wiper

#security #checkpoint #vulnerabilities #networking

2 min read

threataft

Nov 13

Citrix NetScaler CTX697305: Why the 9.3 Matters More Than the 9.5

#security #citrix #vulnerabilities #networking

2 min read

threataft

Nov 13

When Microsoft 365 Falls, So Does Your SOC’s Visibility

#security #devops #azure #cloud

2 min read

threataft

Nov 13

Synology DSM: 27 CVEs Including a 9.8 Pre-Auth SQLi — What to Patch and What to Hunt

#security #vulnerabilities #synology #devops

1 min read

threataft

Nov 12

The GitHub CI Secret Stealer: How pull_request_target Handed Attackers 4,837 Accounts

#github #devops #cicd #security

1

2

2 min read

threataft

Nov 12

CVE-2026-119618: Apache HTTP/2 Pre-Auth RCE — What the Race Condition Actually Does

#security #apache #webdev #devops

2 min read

threataft

Nov 12

AntiFox: The AWS Breach Where Most Requests Were Denied

#aws #security #cloudnative #threatintel

1 min read

threataft

Nov 12

ScreenConnect’s Reverse-Pivot: Why Your Customer’s Compromised Endpoint Is Your Problem

#security #rmm #msp #infosec

1 min read

threataft

Nov 11

CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell

#security #vulnerabilities #barracuda #cve

1 min read

threataft

Nov 11

CVE-2026-20320 & CVE-2026-111793: Both Patched, Both in CISA KEV, Both Exploited

#security #cybersecurity #devops #vulnerabilities

2 min read

threataft

Nov 11

Adobe Connect APSB26-191: Six CVSS 10.0s, Five Branches, One Suffix That Breaks Your Scanner

#security #vulnerabilities #devops #webdev

2 min read

threataft

Nov 10

N-able N-central: 33 Zero-Days, Cloud Offline, Shut Your Servers Down

#security #devops #sysadmin #infosec

1 min read

threataft

Nov 4

Chrome 9.6 CVE — What “No Login Needed” Actually Means (And What It Doesn’t)

#security #vulnerabilities #webdev #javascript

1 min read

threataft

Nov 2

CVE-2026-120322 — A 9.9 Path Traversal in Termix-SSH's File Manager

#security #devops #vulnerabilities #ssh

2 min read

threataft

Nov 1

GitLab's CI/CD Regex Compiler Has a CVSS 10.0 — and It's Being Exploited Right Now

#security #devops #vulnerabilities #cybersecurity

1 min read

threataft

Oct 31

GitLab CVE-2026-97229: Integer Overflow in the Regex Compiler, CVSS 10.0, Exploited in the Wild

#gitlab #security #devops #cicd

1 min read

threataft

Oct 30

CVE-2026-111585: The TeamViewer Host Attacks the Viewer — and the Viewer Is the IT Technician

#security #devops #vulnerabilities #cybersecurity

2 min read

threataft

Oct 30

Cisco SD-WAN CVE-2026-20127 — A CVSS 10.0 Auth Bypass, a Key-Stealing Implant, and a Relay Network Built to Disappear

#security #cisco #networking #vulnerabilities

2 min read

threataft

Oct 20

17 CVEs across 12 AI agent frameworks — one disclosure wave, same three design failures.

#infosec #ai #llm #vulnerabilities

1 min read

threataft

Oct 8

Splunk Patched an Unauthenticated RCE in Its Own SIEM — Here's What You Need to Know

#security #splunk #siem #infosec

2 min read

threataft

Oct 8

Cisco Dropped 18 CVEs Yesterday — Here's What Actually Needs Your Attention

#security #networking #cisco #infosec

1 min read

threataft

Oct 6

CVE-2026-94293: AAS Edge Client — CVSS 9.8 IIoT Data Tampering, No Patch, Decommission Now

#security #cve #iot #industrial

1 min read

threataft

Oct 6

HyperShift CVE-2026-101919 — CVSS 8.8 Tenant Isolation Bypass via Kubeconfig Passthrough

#security #kubernetes #vulnerabilities #devops

1 min read

threataft

Oct 5

Legcord (Discord Client) — 2 CVEs: XSS in Discord Page Becomes RCE + Persistent Traffic Interception

#security #electron #cybersecurity #discord

1 min read

threataft

Oct 5

ZITADEL Cluster: 7 CVEs, Peak CVSS 9.3 — Cross-Org Account Takeover via Passkey Enrollment

#security #identity #cybersecurity #vulnerabilities

1 min read

threataft

Oct 5

CVE-2026-88779 — Citrix NetScaler SAML Memory Overflow, Actively Exploited, CISA KEV

#security #cve #vulnerabilities #infosec

1 min read

threataft

Oct 3

YesWiki 9 CVEs — CVSS 8.6 SQL Injection Can Dump Your Entire Database

#security #webdev #vulnerabilities #php

1 min read

threataft

Oct 3

UTMStack Cluster — 7 CVEs, Peak CVSS 9.9 Missing Auth on STOMP Command WebSocket

#security #cybersecurity #vulnerabilities #devops

1 min read

threataft

Oct 2

WordPress Auth Bypass Cluster — 4 CVSS 9.8, Full Site Takeover via Plugin Flaws

#security #wordpress #vulnerabilities #webdev

1 min read

threataft

Oct 2

Ghost CMS Mass Disclosure — 6 CVEs Including CVSS 8.1 Staff Session Bypass

#security #webdev #cybersecurity #vulnerabilities

1 min read

threataft

Oct 2

Mooncake Mass Disclosure — CVSS 9.8 Arbitrary Memory Read/Write in KV Cache Transfer Engine

#security #machinelearning #llm #vulnerabilities

1 min read

threataft

Oct 1

Dockhand CVE-2026-53988 — CVSS 10.0 Unauthenticated Webhook Auth Bypass

#security #devops #docker #vulnerabilities

1 min read

threataft

Oct 1

Deno CVE-2026-103473 — CVSS 8.1 Command Injection in node:child_process on Windows

#deno #security #javascript #vulnerabilities

1 min read

threataft

Sep 30

Cisco SD-WAN Manager CVE-2026-76504 — CVSS 9.8 Auth Bypass via URI Encoding, Actively Exploited

#security #networking #vulnerabilities #cybersecurity

1 min read

threataft

Sep 30

Five vulnerabilities in AiSOC (the open-source SOC platform) were disclosed today.

#ai #vulnerabilities #cybersecurity #security

1 min read

threataft

Sep 30

LightLLM Mass Disclosure — 2 CVSS 9.8 Unauthenticated RCE in LLM Serving Framework

#ai #security #python #vulnerabilities

2 min read

threataft

Sep 30

CTranslate2 CVE-2026-102566 & CVE-2026-102567 — Heap Overflow in AI Model Loader

#ai #security #cybersecurity #vulnerabilities

2 min read

threataft

Sep 29

RaspAP Mass Disclosure — 3 CVEs, Privilege Escalation + RCE, No Patch

#security #vulnerabilities #cybersecurity #networking

2 min read

Writing Debut