Blog | Rescana

Jan 22 min read

LDAP Nightmare: Mitigating CVE-2024-49112 Vulnerability in Windows Server

Executive Summary Date: January 2025 CVE-2024-49112, dubbed "LDAP Nightmare," is a critical remote code execution (RCE) vulnerability...

Jan 13 min read

Comprehensive Technical Analysis of the U.S. Treasury Department Breach: BeyondTrust Exploitation and Financial Implications

Executive Summary: In December 2024, the U.S. Treasury Department was targeted in a significant cybersecurity breach by Chinese...

Dec 31, 20242 min read

Comprehensive Technical Analysis of the Change Healthcare Data Breach: ALPHV/BlackCat Exploitation of Remote Access Vulnerabilities

Executive Summary: In February 2024, Change Healthcare experienced a significant data breach, impacting approximately 100 million...

Dec 31, 20243 min read

Critical Vulnerability Alert: Apache MINA CVE-2024-52046 Exposes Systems to Remote Code Execution

Executive Summary Date: October 2023 CVE-2024-52046 is a critical vulnerability identified in the Apache MINA library, specifically...

Dec 30, 20245 min read

In-Depth Technical Analysis: Volkswagen Cariad Cloud Misconfiguration Exposes Data of 800,000 Electric Vehicle Owners

Executive Summary: On June 11, 2021, Volkswagen disclosed a data breach affecting approximately 800,000 electric vehicle owners. The...

Dec 26, 20242 min read

Japan Airlines Cyberattack: DDoS Attack Causes Flight Delays and Ticket Sales Suspension

Executive Summary A significant cyberattack targeted Japan Airlines (JAL) on December 26, 2024, resulting in the temporary suspension of...

Dec 25, 20242 min read

Granite School District Security Breach: Exposure of 450,000 Student Records and System Vulnerabilities

Executive Summary A significant security breach at Granite School District resulted in the exposure of 450,000 current and former...

Dec 25, 20243 min read

DemandScience Data Breach Exposes 122 Million Contacts: A Case Study on Decommissioned System Vulnerabilities

Executive Summary A significant data breach at DemandScience resulted in the exposure of 132.8 million records, including 122 million...

Dec 19, 20243 min read

Critical CVE-2023-34990 Vulnerability in FortiWLM: Urgent Mitigation Required

Executive Summary On October 18, 2023, Fortinet disclosed a critical vulnerability designated as CVE-2023-34990 , which has been...

Dec 18, 20243 min read

Exploiting CVE-2024-35250: APT34's Privilege Escalation in Microsoft Windows Systems

Executive Summary Date: December 16, 2024 The CVE-2024-35250 vulnerability is currently being exploited by malicious actors, including...

Dec 18, 20243 min read

Critical Apache Struts 2 Vulnerability CVE-2024-53677: Urgent Mitigation Required

Executive Summary Date: December 16, 2024 The CVE-2024-53677 vulnerability represents a critical risk within the Apache Struts 2 ...

Dec 12, 20243 min read

Ivanti CSA Vulnerability CVE-2024-11639: Maximum-Severity Authentication Bypass Report

Executive Summary On December 10, 2024, Ivanti disclosed a maximum-severity authentication bypass vulnerability in its Cloud Services...

Dec 6, 20243 min read

Critical SonicWall SMA100 Vulnerability SNWLID-2024-0018: Immediate Mitigation Required

Executive Summary On December 5, 2024, a critical vulnerability identified as SNWLID-2024-0018 was disclosed, affecting the SonicWall...

Dec 4, 20243 min read

Critical Remote Code Execution Vulnerability CVE-2024-42448 in Veeam Service Provider Console: Immediate Mitigation Required

Executive Summary On December 04, 2024, the cybersecurity community was alerted to a critical vulnerability identified as CVE-2024-42448 ...

Nov 27, 20243 min read

Critical 7-Zip Vulnerability CVE-2024-11477

Executive Summary Date: November 26, 2024 Given the nature of this vulnerability, it is crucial for organizations to remain vigilant as...

Nov 23, 20243 min read

CVE-2024-10220: Protect your Kubernetes Environments from the latest Critical Kubelet Vulnerability

Executive Summary Date: November 22, 2024 CVE-2024-10220 poses significant risks to organizations utilizing Kubernetes . This...

Nov 20, 20243 min read

Apple Confirms Critical Zero-Day Vulnerabilities in Intel-Based Macs: CVE-2024-44308 and CVE-2024-44309

Executive Summary On November 20, 2024, Apple confirmed the existence of two critical zero-day vulnerabilities affecting Intel-based...

Nov 19, 20244 min read

Critical Vulnerability Alert: CVE-2024-10524 Impacting GNU Wget - Immediate Mitigation Required

Executive Summary On November 19, 2024, a critical vulnerability identified as CVE-2024-10524 was disclosed, affecting the widely...

Nov 14, 20243 min read

CVE-2024-43451: Protecting Windows Systems from NTLM Hash Disclosure Vulnerability Targeted by Russian Threat Actors

Executive Summary Date: November 14, 2024 CVE-2024-43451 has emerged as a significant cybersecurity threat, particularly exploited by...

Nov 14, 20242 min read

Not Every Third-Party Asset Deserves a Panic Button: Announcing Smarter Asset Prioritization with Rescana’s VEGA

"The supply chain stuff is so hard… you have no idea." – Elon Musk Supply chain security extends far beyond your organization’s walls...