Vulnerability - Rankiteo Blog (Page 27)

Hikvision and Dahua: 'Hundreds' of Iranian hacking attempts hit IP cameras

public – 3 min read

Iranian Hackers Exploit Surveillance Cameras in Middle East Ahead of Potential Attacks Since February 28, Iranian-linked hacking groups have targeted…

Mar 4, 2026

Jeremy C

MOVEit and Nebraska Bank: Neb. Bank Reaches $2.4M Deal To Settle MOVEit Breach Suit

public – 2 min read

Nebraska Bank Settles MOVEit Breach Lawsuit for $2.4 Million On March 4, 2026, a family-owned Nebraska bank agreed to…

Mar 4, 2026

Jeremy C

n8n and Tenda: Tenda Routers Hit By Zerobot Malware Exploiting Command Injection Flaw

public – 3 min read

Zerobot Botnet Exploits Tenda and n8n Vulnerabilities in Ongoing Campaign Akamai’s Security Incident Response Team (SIRT) has uncovered an…

Mar 4, 2026

Jeremy C

ModelScope: MS-Agent Vulnerability Let Attackers Hijack AI Agent to Gain Full System Control

public – 2 min read

Critical RCE Vulnerability in MS-Agent AI Framework Exposes Systems to Full Compromise A severe security flaw (CVE-2026-2256) has been identified…

Mar 4, 2026

Jeremy C

IPVanish: IPVanish VPN for macOS Vulnerability Let Attackers Escalate Privilege and Execute Arbitrary Code

public – 3 min read

Critical Privilege Escalation Flaw in IPVanish VPN for macOS Exposes Systems to Root Exploits A severe privilege escalation vulnerability has…

Mar 4, 2026

Jeremy C

Apache Software Foundation: Apache ActiveMQ Vulnerability Allows Attackers to Trigger DoS Attacks with Malformed Packets

public – 3 min read

Critical DoS Vulnerability in Apache ActiveMQ Exposes Systems to Disruption A severe vulnerability in Apache ActiveMQ, a widely used open-source…

Mar 3, 2026

Jeremy C

Broadcom and Federal Civilian Executive Branch: CISA Warns of VMware Aria Operations Vulnerability Exploited in Attacks

public – 3 min read

Critical VMware Aria Operations Vulnerability Exploited in the Wild, Added to CISA KEV Catalog A severe command injection vulnerability in…

Mar 3, 2026

Jeremy C

Langflow: Langflow’s AI CSV Agent Vulnerability Allows Remote Code Execution Attacks

public – 2 min read

Critical Zero-Day Vulnerability in Langflow AI Platform Exposes Systems to Remote Code Execution A severe security flaw in Langflow, a…

Mar 3, 2026

Jeremy C

Perplexity: 'The attack requires no exploit, no user clicks, and no explicit request forsensitive actions': Experts say Perplexity's AI Comet browser can be hijacked to steal your passwords

public – 2 min read

Zero-Click AI Prompt Injection Flaw in Comet Browser Exposed Sensitive Data Researchers at Zenity uncovered PleaseFix, a zero-click indirect prompt…

Mar 3, 2026

Jeremy C

Angular: Angular i18n Flaw Lets Hackers Execute Malicious Code via Critical XSS Vulnerability

public – 2 min read

High-Severity XSS Vulnerability in Angular Framework Exposes Applications to Malicious Code Execution A critical security flaw, CVE-2026-27970, has been identified…

Mar 3, 2026

Jeremy C

Kali Forms: Hackers Exploit Kali Forms Vulnerability to Take Over WordPress Sites

public – 2 min read

Critical Kali Forms WordPress Plugin Vulnerability Exploited in the Wild A severe Remote Code Execution (RCE) vulnerability in Kali Forms,…

Mar 2, 2026

Jeremy C

Qualcomm and Google: Android Update Patches Exploited Qualcomm Zero-Day

public – 2 min read

Google Patches 130 Android Vulnerabilities, Including Exploited Zero-Day Google released its March 2026 Android security updates, addressing nearly 130 vulnerabilities…

Mar 2, 2026

Jeremy C