Kudelski Security

ID: b9fa8372-0ceb-516e-8124-b30110d006bb

STIX ID: identity--b9fa8372-0ceb-516e-8124-b30110d006bb

Feed Type: skeleton

Earliest post: 2021-06-23

Latest post: 2026-07-30

Technical research and threat intelligence from Kudelski Security, covering ransomware, threat hunting, incident response, vulnerabilities, AI security, cryptography, malware, and adversary infrastructure.

Exclude posts that do not describe a security incident

Classification

Min Pub Date

01/01/2020

Max Pub Date

08/11/2026

Title	Date Published ↓	Describes Incident	Visible
Kudelski Security Research Center	2026-07-30	True	True
Cisco Secure FMC && hard-coded password exploited in Zero-Day attacks	2026-07-30	True	True
Widespread Exploitation of Microsoft SharePoint	2026-07-24	True	True
How DPRK’s Contagious Interview Campaign Targets Developers	2026-06-30	True	True
Klue Supply Chain Compromise and CRM Data Exfiltration Incident Advisory	2026-06-19	True	True
Critical Vulnerabilities in Ivanti Sentry	2026-06-10	True	True
Check Point VPN Authentication Bypass Under Active Exploitation	2026-06-08	True	True
Windows Netlogon stack buffer overflow	2026-06-02	True	True
Ivanti EPMM CVE-2026-6973 Allows RCE with Admin Credentials, Under Active Exploitation	2026-05-07	True	True
Widespread DAEMON Tools Supply Chain Attack Enables Targeted Follow-on	2026-05-05	True	True
FortiClientEMS 7.4.4: Critical SQL Injection Flaw Exploited in the Wild	2026-04-28	True	True
Critical Vulnerability in Fortinet FortiClient EMS	2026-04-07	True	True
F5 BigIP APM: Remote Code Execution	2026-03-30	True	True
Investigating Two Variants of the Trivy Supply-Chain Compromise	2026-03-27	True	True
Critical Vulnerabilities in Citrix NetScaler ADC and Gateway	2026-03-25	True	True
Trivy Tag Compromise Supply Chain Attack	2026-03-23	True	True
Unauthenticated Remote Code Execution in Oracle Identity Manager and Web Services Manager	2026-03-23	True	True
Inside the Cyber Infrastructure Behind DPRK Fake IT Worker Operations	2026-03-23	True	True
CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability.md	2026-02-26	True	True
DPRK Fake IT Workers Fraud Playbook	2026-02-24	True	True
CVE-2026-1281 and CVE-2026-1340 Affecting Ivanti Endpoint Manager Mobile (EPMM)	2026-01-30	True	True
GNU telnetd auth bypass CVE-2026-24061	2026-01-30	True	True
Heap-Based Buffer Overflow in Fortinet Products	2026-01-15	True	True
Inside the DPRK Fake IT Workers Network: IP Ranges, Proxies, and Internal Coordination	2026-01-05	True	True
Kudelski Security Research Center	2025-12-29	True	True
Fortinet FortiCloud SSO Authentication Bypass Vulnerabilities Actively Exploited (CVE-2025-59718, CVE-2025-59719)	2025-12-18	True	True
UPDATE: Critical Security Vulnerability in React Server Components (CVE-2025-55182)	2025-12-04	True	True
Critical Security Vulnerability in React Server Components (CVE-2025-55182)	2025-12-04	True	True
F5 Security Incident	2025-10-16	True	True
Microsoft disclosed a zero-day vulnerability affecting the NetMan service	2025-10-15	True	True
Unauthorized Access to SonicWall Cloud Backup Firewall Preference Files	2025-09-23	True	True
Supply Chain Attack Targeting Several NPM Packages to Harvest Credentials	2025-09-19	True	True
Inside a MuddyWater Intrusion: Exploitation of SharePoint and Living-Off-the-Land Tactics	2025-09-17	True	True
How We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositories	2025-08-19	True	True
Unauthorized Data Exposure via Range Queries in ServiceNow ACLs	2025-07-10	True	True
Lunar Spider – Lotus V2 Loader Campaign Using Fake CAPTCHA Delivery and DLL Sideloading	2025-06-27	True	True
Exploiting the Human Layer: Scattered Spider’s Identity-Centric Attack Chain (2022–2025)	2025-06-23	True	True
XML External Entity (XXE) Processing Vulnerability in GeoServer WFS Service	2025-06-19	True	True
Veeam Backup & Replication: Critical RCE Patched	2025-06-18	True	True
Ivanti EPMM Bugs Combine for Unauthenticated RCE in the Wild	2025-05-21	True	True
Unmasking BlackBasta: Inside the Ransomware Syndicate’s Leaked Operations	2025-04-30	True	True
Critical Vulnerability in SAP NetWeaver Visual Composer	2025-04-25	True	True
Getting RCE on browser-use/web-ui AI Agent Instances	2025-04-23	True	True
Gladinet CentreStack and Gladinet Triofox – Critical RCE	2025-04-16	True	True
Fortinet FortiSwitch – Unverified Password Change Vulnerability	2025-04-09	True	True
Critical Unauthenticated Remote Code Execution Vulnerabilities inIngress NGINX	2025-03-25	True	True
Critical VMware ESXi, Workstation, Fusion Vulnerabilities Seen Exploited in Wild	2025-03-06	True	True
Tracking Threat Actors: How Infrastructure Analysis Reveals Cyber Attack Patterns	2025-03-05	True	True
Ivanti ICS, IPS, ISAC, CSA: Multiple Vulnerabilities Disclosed and Patched	2025-02-12	True	True
Critical Vulnerability in SonicWall Secure Mobile Access (SMA) 1000 Series Appliances	2025-01-29	True	True