Vulnerability - Rankiteo Blog (Page 89)

Act now! Aussie cyber agency issues urgent warning over critical React vulnerability

public – 2 min read

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued an “act now” critical alert regarding…

Dec 3, 2025

Jeremy C

Deloitte, Shattered.0.io, NeuralTrust, CrewAI and Semantic Kernel: 48% of Your AI Agents Are Running Without Meaningful Security Controls

public – 4 min read

Enterprise AI Agents Pose Unprecedented Security Risks, Report Finds In late 2024, enterprise AI evolved from chatbots into autonomous agents…

Dec 1, 2025

Jeremy C

Microsoft: Copilot tricked into telling reseachers how to hack itself

public – 3 min read

Microsoft Copilot Vulnerability "CoSnitch" Exposed via AI Self-Disclosure Researchers at Varonis Threat Labs uncovered a critical vulnerability in…

Dec 1, 2025

Jeremy C

Cisco: Russian hackers exploit weak router security to breach critical infrastructure, Western allies warn

public – 2 min read

Russian FSB Hackers Exploit Weak Router Security to Target Global Critical Infrastructure A joint advisory from the U.S., UK,…

Dec 1, 2025

Jeremy C

Huawei, Tower of Fantasy and Palo Alto Networks: DragonForce Ransomware Abused Microsoft Teams to Hide Malware Activity

public – 2 min read

DragonForce Ransomware Group Abuses Microsoft Teams to Conceal Malicious Traffic in US Firm Breach Cybercriminals tied to the DragonForce ransomware…

Dec 1, 2025

Jeremy C

React and Next.js: React2Shell Vulnerability Exploited in the Wild, Analysts Warn

public – 3 min read

Critical React2Shell Exploit (CVE-2025-55182) Drives Large-Scale Attack Campaign A newly disclosed critical vulnerability, React2Shell (CVE-2025-55182), enables pre-authentication remote code execution…

Dec 1, 2025

Jeremy C

FreePBX and Indian technology firm: Hackers Exploiting FreePBX Vulnerability to Deploy Webshell and Gain Control of Systems

public – 2 min read

Sophisticated FreePBX Attack Campaign Deploys Persistent "EncystPHP" Webshell A financially motivated hacker group, INJ3CTOR3, has launched a targeted…

Dec 1, 2025

Jeremy C

Fortinet: Fortinet Disables FortiCloud SSO Following 0-day Vulnerability Exploited in the Wild

public – 4 min read

Fortinet Disables FortiCloud SSO After Zero-Day Exploitation Fortinet temporarily disabled its FortiCloud Single Sign-On (SSO) service following the active exploitation…

Dec 1, 2025

Jeremy C

LA-Studio: 20,000 WordPress Sites Compromised by Backdoor Vulnerability Enabling Malicious Admin Access

public – 3 min read

Critical Backdoor in LA-Studio Element Kit for Elementor Exposes 20,000+ WordPress Sites A severe backdoor vulnerability (CVE-2026-0920, CVSS 9.…

Dec 1, 2025

Jeremy C

LA-Studio: 20,000 WordPress Sites Affected by Backdoor Vulnerability Allowing Malicious Admin User Creation

public – 2 min read

Critical Backdoor in LA-Studio Element Kit for Elementor Exposes 20,000+ WordPress Sites A severe backdoor vulnerability (CVE-2026-0920) has been…

Dec 1, 2025

Jeremy C

Fortinet: New Sicarii RaaS Operation Attacks Exposed RDP Services and Attempts to Exploit Fortinet Devices

public – 2 min read

Sicarii Ransomware: A Geopolitically Motivated Threat Emerges with Israeli Affiliations In December 2025, a new ransomware-as-a-service (RaaS) operation named Sicarii…

Dec 1, 2025

Jeremy C

Chainlit: Chainlit vulnerabilities expose enterprises to potential data leaks and takeovers

public – 2 min read

Critical Vulnerabilities in Chainlit AI Framework Expose Enterprises to Data Leaks and Account Takeovers Cybersecurity firm Zafran has identified two…

Dec 1, 2025

Jeremy C