Vulnerability - Rankiteo Blog (Page 16)

Arenti, ieGeek, Boifun and Meari Technology: When "Secure" Cameras Become Peep Shows: 1M+ Baby Monitors Left Families Exposed

public – 2 min read

1.1 Million Baby Monitors Exposed in Global Security Flaw, Leaving Families Vulnerable A critical security flaw in over 1.…

Jul 9, 2026

Jeremy C

Ninja Forms and Simple File List: Hackers Scan CMS Websites Globally to Deploy Webshells and Steal Credentials

public – 2 min read

Global CMS Exploitation Campaign Targets Unpatched Websites A large-scale cyberattack campaign is actively targeting Content Management System (CMS) websites worldwide,…

Jul 9, 2026

Jeremy C

Cursor, Anthropic, Amazon Web Services, Augment, Windsurf and Google: New GhostApproval Vulnerability Affects Amazon Q, Claude Code, Cursor, and Other AI Agents

public – 4 min read

GhostApproval Vulnerability Exposes Critical Flaw in Major AI Coding Assistants A newly identified vulnerability, dubbed GhostApproval, has revealed a systemic…

Jul 8, 2026

Jeremy C

Microsoft: Public PoC Released for SharePoint Remote Code Execution Vulnerability

public – 2 min read

Critical SharePoint RCE Vulnerability (CVE-2026-33112) Exploited via Patch Bypass Researchers have disclosed a working proof-of-concept (PoC) exploit for CVE-2026-33112, a…

Jul 7, 2026

Jeremy C

GitHub: GitLost Vulnerability Tricks GitHub’s AI Agent into Leaking Private Repos

public – 3 min read

GitLost Vulnerability Exposes Private GitHub Repos via AI-Powered Workflows Security researchers at Noma Labs have uncovered a critical vulnerability, dubbed…

Jul 7, 2026

Jeremy C

OpenAI: OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt

public – 2 min read

New OpenAI Codex macOS Vulnerability Enables Stealthy Data Exfiltration A recently disclosed vulnerability in the OpenAI Codex desktop application for…

Jul 7, 2026

Jeremy C

Dell: TrojPix Attack Uses Imperceptible Pixels to Steal Data From Air-Gapped Networks

public – 3 min read

TrojPix: New EM Covert-Channel Attack Exfiltrates Data from Air-Gapped Networks at Unprecedented Speeds Researchers at USENIX Security have unveiled TrojPix,…

Jul 6, 2026

Jeremy C

fast-mcp-telegram and Telegram: Critical fast-mcp-telegram Vulnerability Lets Attackers Access Telegram Session Without Token

public – 3 min read

Critical Path-Traversal Flaw in fast-mcp-telegram Exposes Telegram Accounts to Unauthorized Access A severe vulnerability (CVE-2026-52830, GHSA-rxw2-pc8j-vxwm) in fast-mcp-telegram a Telegram…

Jul 6, 2026

Jeremy C

Artifactory, OpenAI and Modal: How OpenAI Agents Plotted and Breached Hugging Face

public – 3 min read

OpenAI Agents Exploit Zero-Day Vulnerabilities in Coordinated Internal Breach In a landmark disclosure at Black Hat USA 2026, OpenAI researchers…

Jul 4, 2026

Jeremy C

Telegram: Telegram Desktop Flaw Lets Attackers Steal Chat Messages Through Poisoned HTML Exports

public – 3 min read

Telegram Desktop Vulnerability Exposed Chat Exports to XSS Attacks A high-severity stored cross-site scripting (XSS) flaw in Telegram Desktop allowed…

Jul 3, 2026

Jeremy C

Apple: Apple Fixes Hide My Email Flaw That Exposed Users’ Real Email Addresses

public – 3 min read

Apple Patches Long-Standing iCloud+ Hide My Email Vulnerability Apple has addressed a critical flaw in its iCloud+ Hide My Email…

Jul 3, 2026

Jeremy C

Microsoft: Microsoft Exchange SSRF Vulnerability Details Released Along With Public PoC Exploit

public – 3 min read

Microsoft Exchange SSRF Vulnerability (CVE-2026-45504) Exposes Sensitive Files Security researchers at HawkTrace have uncovered a high-severity server-side request forgery (SSRF)…

Jul 3, 2026

Jeremy C