🕵️ RESEARCH & DEEP DIVES
MIND Secures $72 Million for AI-Powered DLP — SecurityWeek
Check Point, Kaspersky, Tanium Patch Product Vulnerabilities — SecurityWeek
HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th) — SANS ISC
AI Agent Breaches Spanish Organization, Modifies Personal Data — Dark Reading
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall — The Hacker News
QTSAn improper authentication vulnerability has been reported to affect produ... — CVE ThreatInt
QcalAgentA cross-site scripting (XSS) vulnerability has been reported to affe... — CVE ThreatInt
Booking Calendar through 11.8.2 - Reflected Cross-Site Scripting via 'options' Par... — CVE ThreatInt
EmbedPress through 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' ... — CVE ThreatInt
Custom Twitter Feeds through 2.8.0 - Authenticated (Contributor+) Stored Cross-Sit... — CVE ThreatInt
Auto Upload Images through 3.3.2 - Authenticated (Contributor+) Server-Side Reques... — CVE ThreatInt
Booking Calendar through 11.8.2 - Authenticated (Editor+) Privilege Escalation to ... — CVE ThreatInt
Magazine Blocks through 1.8.6 - Missing Authorization to Authenticated (Contributo... — CVE ThreatInt
Download Manager through 3.3.68 - Insecure Direct Object Reference to Authenticate... — CVE ThreatInt
Magazine Blocks through 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scr... — CVE ThreatInt
Foxtool All-in-One: Contact chat button, Custom login, Media optimize images ... — CVE ThreatInt
InfiniteWP Client through 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_g... — CVE ThreatInt
Clean Login before 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Compari... — CVE ThreatInt
Clean Login before 1.19 - Unauthenticated Account Creation with Registration Disab... — CVE ThreatInt
All Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LFI via lightspeed Block ... — CVE ThreatInt
WP Ghost (Hide My WP Ghost) before 7.0.11 - Unauthenticated URL Hiding Bypass via ... — CVE ThreatInt
Hackers Poison Movie Torrents With MovieReaper Malware That Uses Solana for C2 — Cyber Security News