logo

Kudelski Security

ID: b9fa8372-0ceb-516e-8124-b30110d006bb

STIX ID: identity--b9fa8372-0ceb-516e-8124-b30110d006bb

Feed Type: skeleton

Earliest post: 2021-06-23

Latest post: 2026-07-30

Technical research and threat intelligence from Kudelski Security, covering ransomware, threat hunting, incident response, vulnerabilities, AI security, cryptography, malware, and adversary infrastructure.

01/01/2020
10/14/2026
Title Date Published ↓Threat ScoreAuthorVisible
Fortinet FortiMail Path Traversal2026-10-0575True
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability2026-09-3085True
Citrix NetScaler ADC and NetScaler Gateway Remote Code Execution Zero-Days2026-09-2890True
F5 BIG-IP APM OAuth Authorization Server Heap Overflow Leading to Unauthenticated RCE2026-09-2390True
Check Point Management Server Directory Traversal Leading to Arbitrary Script Execution2026-09-2390True
Cisco Identity Services Engine Authentication Bypass – Actively Exploited2026-09-1790True
Cisco Secure Email Gateway SQL Injection – Actively Exploited2026-09-1590True
Critical GitLab Path Traversal Vulnerability Allows Unauthenticated Arbitrary File Read2026-09-1180True
Check Point Patches Two Critical RCE Bugs in VPN Certificate Handling2026-09-1075True
SAP Patches Critical Unauthenticated RCE Bugs2026-09-0985True
StyleSmuggler (CVE-2026-75650): Magento, Adobe Commerce Affected by 0-day RCE2026-09-0890True
Beyond Lazarus: Organization of DPRK Cyber Capabilities2026-09-0790True
Three Critical ServiceNow Platform Vulnerabilities Could Allow Arbitrary Execution, Privilege Escalation2026-08-3180True
Keycloak Credential Reset Authentication Bypass2026-08-2475True
VMware Security Advisory CVE-2026-593102026-08-2195True
Inside North Korea’s Cybercrime Ecosystem: Fake IT Workers, Gambling Networks and Malware2026-08-1275True
VMware Security Advisory2026-07-3180True
Cisco Secure FMC && hard-coded password exploited in Zero-Day attacks2026-07-3075True
Kudelski Security Research Center2026-07-3090True
Widespread Exploitation of Microsoft SharePoint2026-07-2488True
DPRK Fake IT Workers: Inside Their Evolving Network Infrastructure2026-07-1785True
How DPRK’s Contagious Interview Campaign Targets Developers2026-06-3085True
Klue Supply Chain Compromise and CRM Data Exfiltration Incident Advisory2026-06-1975True
Fortinet "FortiBleed" Global Compromise & Active Exploitation of Fortinet Vulnerabilities2026-06-1785True
Critical Vulnerabilities in Ivanti Sentry2026-06-1090True
Check Point VPN Authentication Bypass Under Active Exploitation2026-06-0885True
Windows Netlogon stack buffer overflow2026-06-0290True
Ivanti EPMM CVE-2026-6973 Allows RCE with Admin Credentials, Under Active Exploitation2026-05-0778True
Widespread DAEMON Tools Supply Chain Attack Enables Targeted Follow-on2026-05-0585True
Linux CVE-2026-31431 "Copy Fail" LPE Enables Stealthy Root Access, Container Escape2026-05-0175True
FortiClientEMS 7.4.4: Critical SQL Injection Flaw Exploited in the Wild2026-04-2885True
Critical Vulnerability in Fortinet FortiClient EMS2026-04-0790True
F5 BigIP APM: Remote Code Execution2026-03-3090True
Investigating Two Variants of the Trivy Supply-Chain Compromise2026-03-2790True
Critical Vulnerabilities in Citrix NetScaler ADC and Gateway2026-03-2575True
Trivy Tag Compromise Supply Chain Attack2026-03-2385True
Unauthenticated Remote Code Execution in Oracle Identity Manager and Web Services Manager2026-03-2390True
Inside the Cyber Infrastructure Behind DPRK Fake IT Worker Operations2026-03-2378True
CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability.md2026-02-2690True
DPRK Fake IT Workers Fraud Playbook2026-02-2475True
GNU telnetd auth bypass CVE-2026-240612026-01-3085True
CVE-2026-1281 and CVE-2026-1340 Affecting Ivanti Endpoint Manager Mobile (EPMM)2026-01-3075True
Heap-Based Buffer Overflow in Fortinet Products2026-01-1585True
Inside the DPRK Fake IT Workers Network: IP Ranges, Proxies, and Internal Coordination2026-01-0578True
Kudelski Security Research Center2025-12-2985True
Fortinet FortiCloud SSO Authentication Bypass Vulnerabilities Actively Exploited (CVE-2025-59718, CVE-2025-59719)2025-12-1880True
Critical Security Vulnerability in React Server Components (CVE-2025-55182)2025-12-0492True
UPDATE: Critical Security Vulnerability in React Server Components (CVE-2025-55182)2025-12-0490True
Critical Vulnerabilities in Oracle E-Business Suite Marketing Administration2025-10-2490True
F5 Security Incident2025-10-1685True

1–50 of 103