Resecurity
The LiteLLM Supply-Chain Attack — TeamPCP “SANDCLOCK” CI/CD Credential-Harvesting Campaign via a Backdoored Trivy GitHub Action
Metabase Zero-Day Exploited in the Wild: Unauthenticated SQL Injection Leading to Full Admin Access
ExfilSquad Targets New Victims, Shares Data via Torrents
CVE-2026-16812: Critical Command Injection in Arista VeloCloud Orchestrator
From WSProxy to Root: INC ransomware and SonicWall SMA Exploit Chain
When AI Becomes the Attacker: Understanding Autonomous Offensive Security Agents
Exploiting Langflow's validate_code() Endpoint for Remote Code Execution
From Web Request to Domain Compromise: Understanding the July 2026 SharePoint Attacks
Artificial Intelligence Safety Law: Landmark Industry Regulation Bill
CVE-2026-48282: Adobe ColdFusion RDS Path Traversal Leading to RCE
Reconnaissance in the Age of AI: Exploring Modern ML Infrastructure
CVE-2026-20253: Splunk Enterprise Pre-Authentication Remote Code Execution
Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise
The Anubis Ransomware Attack on the Adriatic Port Authority
Silent Ransom Group (SRG): Uncovering DNS Fast Flux Infrastructure
CVE-2026-20182: Unauthenticated Cisco SD-WAN Control-Plane Compromise via vHub Authentication Bypass
Mini Shai-Hulud: A Cross-Ecosystem Supply Chain Attack on PyTorch Lightning & Intercom Client
Iranian Proxy Networks in Latin America Post-Maduro: IRGC
CVE-2026-25874: Hugging Face LeRobot Unauthenticated RCE via Pickle Deserialization
Blog