LR pixel

UAT-8837 Critical Infrastructure Attack

von | 17. Jan. 2026 | Unkategorisiert

What is the Attack? An active campaign has been linked, with medium confidence, to a threat actor designated UAT-8837, which Cisco Talos assesses as a China-nexus group targeting critical infrastructure organizations in North America. Observed activity includes...

n8n Unauthenticated Remote Code Execution

von | 8. Jan. 2026 | Unkategorisiert

What is the Vulnerability? CVE-2026-21858 arises from a Content-Type confusion flaw in n8n’s webhook and form handling logic. Specifically, certain form-based workflows do not adequately validate or enforce multipart form content types, allowing attackers to override...

MongoBleed Unauthenticated Memory Leak

von | 30. Dez. 2025 | Unkategorisiert

What is the Vulnerability? A critical vulnerability in MongoDB Server’s handling of zlib-compressed network traffic allows a fully unauthenticated remote attacker to read uninitialized heap memory and leak sensitive data directly from server memory. The flaw stems...

Cisco AsyncOS Zero-day

von | 18. Dez. 2025 | Unkategorisiert

What is the Attack? Cisco has confirmed the active exploitation of a critical zero-day vulnerability in AsyncOS, tracked as CVE-2025-20393, affecting Cisco Secure Email Gateway (SEG) and Secure Email and Web Manager (SEWM) appliances. The vulnerability allows...