Jeremy C - Rankiteo Blog (Page 121)

pac4j: Critical pac4j-jwt Authentication Bypass Vulnerability Allows Attackers to Impersonate Any User

public – 2 min read

Critical Authentication Bypass Flaw in pac4j-jwt Exposes Systems to Full Takeover A severe vulnerability in the widely used Java authentication…

Mar 5, 2026

Jeremy C

News Organizations: FreeScout vulnerability enables unauthenticated, zero-click RCE via email (CVE-2026-28289)

public – 3 min read

Critical FreeScout Vulnerability (CVE-2026-28289) Enables Remote Server Takeover via Malicious Emails A newly disclosed vulnerability in FreeScout, an open-source help…

Mar 5, 2026

Jeremy C

Huntress: How a Brute Force Attack Unmasked a Ransomware Infrastructure Network

public – 2 min read

Huntress Uncovers Ransomware-as-a-Service Ecosystem Behind "Routine" RDP Brute-Force Attack Security researchers at Huntress recently traced a seemingly ordinary…

Mar 4, 2026

Jeremy C

Connecticut Department of Social Services, Gainwell Technologies and Hartford HealthCare: Data breach exposes information of 22,500 Connecticut Medicaid patients

public – 2 min read

Hartford HealthCare Medicaid Portal Breach Exposes Data of 22,500 Patients A cyberattack on the Connecticut Medicaid provider portal compromised…

Mar 4, 2026

Jeremy C

Amazon: Amazon Quick Flaw Exposed Restricted AI Chat Agents to Unauthorized Users

public – 3 min read

Amazon Quick AI Flaw Exposed Backdoor in Frontend-Only Permission Controls Security researchers uncovered a critical vulnerability in Amazon QuickSight, Amazon’…

Mar 4, 2026

Jeremy C

GitHub and GitHub Enterprise Server: Critical GitHub.com and Enterprise Server RCE Vulnerability Enables Full Server Compromise

public – 3 min read

Critical GitHub RCE Vulnerability (CVE-2026-3854) Exposed Millions of Private Repositories Security researchers at Wiz uncovered a severe remote code execution…

Mar 4, 2026

Jeremy C

Longevity Health Plan: Longevity Health Plan Data Breach Investigation

public – 2 min read

Longevity Health Plan Data Breach Under Investigation After Exposing 15,000 Individuals’ Sensitive Information Shamis & Gentile P.A., a…

Mar 4, 2026

Jeremy C

Israeli oil and gas company and Israeli payment systems: Israel says it knocked out Iran’s cyber warfare headquarters

public – 3 min read

Iran-Linked Cyberattacks Escalate Following U.S.-Led Strike on Iranian Leadership Following a U.S.-led military operation on February…

Mar 4, 2026

Jeremy C

Google: Tycoon2FA phishing platform returns after recent police disruption

public – 2 min read

Tycoon2FA Phishing Service Resurfaces After Europol-Led Disruption On March 4, Europol and partners led by Microsoft disrupted the Tycoon2FA phishing-as-a-service…

Mar 4, 2026

Jeremy C