Blog | Rescana

Dec 18, 20243 min read

Exploiting CVE-2024-35250: APT34's Privilege Escalation in Microsoft Windows Systems

Executive Summary Date: December 16, 2024 The CVE-2024-35250 vulnerability is currently being exploited by malicious actors, including...

Dec 18, 20243 min read

Critical Apache Struts 2 Vulnerability CVE-2024-53677: Urgent Mitigation Required

Executive Summary Date: December 16, 2024 The CVE-2024-53677 vulnerability represents a critical risk within the Apache Struts 2 ...

Dec 12, 20243 min read

Ivanti CSA Vulnerability CVE-2024-11639: Maximum-Severity Authentication Bypass Report

Executive Summary On December 10, 2024, Ivanti disclosed a maximum-severity authentication bypass vulnerability in its Cloud Services...

Dec 6, 20243 min read

Critical SonicWall SMA100 Vulnerability SNWLID-2024-0018: Immediate Mitigation Required

Executive Summary On December 5, 2024, a critical vulnerability identified as SNWLID-2024-0018 was disclosed, affecting the SonicWall...

Dec 4, 20243 min read

Critical Remote Code Execution Vulnerability CVE-2024-42448 in Veeam Service Provider Console: Immediate Mitigation Required

Executive Summary On December 04, 2024, the cybersecurity community was alerted to a critical vulnerability identified as CVE-2024-42448 ...

Nov 27, 20243 min read

Critical 7-Zip Vulnerability CVE-2024-11477

Executive Summary Date: November 26, 2024 Given the nature of this vulnerability, it is crucial for organizations to remain vigilant as...

Nov 23, 20243 min read

CVE-2024-10220: Protect your Kubernetes Environments from the latest Critical Kubelet Vulnerability

Executive Summary Date: November 22, 2024 CVE-2024-10220 poses significant risks to organizations utilizing Kubernetes . This...

Nov 20, 20243 min read

Apple Confirms Critical Zero-Day Vulnerabilities in Intel-Based Macs: CVE-2024-44308 and CVE-2024-44309

Executive Summary On November 20, 2024, Apple confirmed the existence of two critical zero-day vulnerabilities affecting Intel-based...

Nov 19, 20244 min read

Critical Vulnerability Alert: CVE-2024-10524 Impacting GNU Wget - Immediate Mitigation Required

Executive Summary On November 19, 2024, a critical vulnerability identified as CVE-2024-10524 was disclosed, affecting the widely...

Nov 14, 20243 min read

CVE-2024-43451: Protecting Windows Systems from NTLM Hash Disclosure Vulnerability Targeted by Russian Threat Actors

Executive Summary Date: November 14, 2024 CVE-2024-43451 has emerged as a significant cybersecurity threat, particularly exploited by...

Nov 14, 20242 min read

Not Every Third-Party Asset Deserves a Panic Button: Announcing Smarter Asset Prioritization with Rescana’s VEGA

"The supply chain stuff is so hard… you have no idea." – Elon Musk Supply chain security extends far beyond your organization’s walls...

Nov 13, 20243 min read

Critical FortiOS Session Fixation Vulnerability FG-IR-23-475: Risks and Mitigation Strategies

Executive Summary On November 12, 2024, a critical vulnerability was identified in FortiOS , designated as FG-IR-23-475 . This...

Nov 12, 20243 min read

Critical Citrix Recording Manager Vulnerabilities CVE-2024-8068 & CVE-2024-8069: Urgent Mitigation Required

Executive Summary On November 12, 2024, a critical zero-day vulnerability was identified in Citrix Recording Manager , tracked as...

Nov 12, 20243 min read

Critical Security Update for Dell Enterprise SONiC Distribution: Addressing CVE-2024-45763, CVE-2024-45764, and CVE-2024-45765 Vulnerabilities

Executive Summary On November 08, 2024, Dell Technologies issued a critical security update (DSA-2024-449) addressing multiple...

Nov 9, 20243 min read

PAN-OS Management Interface Vulnerability PAN-SA-2024-0015: Remote Code Execution Risk and Mitigation Strategies

Executive Summary Date: November 08, 2024 The PAN-SA-2024-0015 vulnerability has been identified in the PAN-OS management interface,...

Nov 8, 20243 min read

Critical Cybersecurity Threat Alert: Immediate Action Required for Dahua IP Cameras, Linux Kernel, and Microsoft Exchange Server Vulnerabilities

Executive Summary Date: October 04, 2024 On August 21, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) added four new...

Nov 6, 20243 min read

CVE-2024-43093: Critical Android Framework Vulnerability Exploited in Targeted Espionage Campaigns

Executive Summary On November 05, 2024, Google issued a warning regarding the CVE-2024-43093 vulnerability, a critical privilege...

Nov 6, 20243 min read

DocuSign API Phishing Incident: An In-Depth Analysis of Financial Data Exploitation

Incident Analysis Report: DocuSign API Abuse Incident Date: November 06, 2024 Executive Summary The incident involving the DocuSign API...

Nov 6, 20243 min read

NVIDIA GPU Display Driver Vulnerabilities: Critical CVE-2024-0126 Risks and Mitigation Strategies

Executive Summary In October 2024, NVIDIA released a security bulletin detailing several critical vulnerabilities in their GPU Display...

Nov 3, 20243 min read

Critical Sandbox Escape Vulnerability in ServiceNow Now Platform: CVE-2024-8923 Analysis

Executive Summary CVE-2024-8923 represents a critical vulnerability within the ServiceNow Now Platform , specifically identified as a...