Kudelski Security Research kudelskisecurity.com

CVE-2026-20127 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability.md

kudelskisecurity.com·11w

DPRK Fake IT Workers Fraud Playbook

kudelskisecurity.com·12w

Advisory: CVE-2026-1731 – Critical Pre-Auth RCE in BeyondTrust RS & PRA

kudelskisecurity.com·13w

Chrysalis Backdoor Campaign

kudelskisecurity.com·15w

CVE-2026-1281 and CVE-2026-1340 Affecting Ivanti Endpoint Manager Mobile (EPMM)

kudelskisecurity.com·15w

Administrative FortiCloud SSO authentication bypass CVE-2026-24858

kudelskisecurity.com·15w

Heap-Based Buffer Overflow in Fortinet Products

kudelskisecurity.com·17w

Critical Command Injection in Fortinet FortiSIEM

kudelskisecurity.com·17w

Inside the DPRK Fake IT Worker Network: IP Ranges, Proxies, and Internal Coordination

kudelskisecurity.com·19w

Mongobleed CVE-2025-14847

kudelskisecurity.com·20w

Critical IKEv2 VPN Vulnerability in WatchGuard Fireware OS – CVE-2025-14733 - Kudelski Security Research Center

kudelskisecurity.com·21w

Fortinet FortiCloud SSO Authentication Bypass Vulnerabilities Actively Exploited (CVE-2025-59718, CVE-2025-59719) - Kudelski Security Research Center

kudelskisecurity.com·21w

UPDATE: Critical Security Vulnerability in React Server Components (CVE-2025-55182) - Kudelski Security Research Center

kudelskisecurity.com·23w

Critical Security Vulnerability in React Server Components - Kudelski Security Research Center

kudelskisecurity.com·23w

Sha1-Hulud 2.0 NPM Supply-Chain Campaign - Kudelski Security Research Center

kudelskisecurity.com·25w

Compromise of Third-Party Application Gainsight Enables Salesforce OAuth Token Abuse - Kudelski Security Research Center

kudelskisecurity.com·25w

Critical FortiWeb CVE-2025-64446 Allows Unauthenticated Device Takeover - Kudelski Security Research Center

kudelskisecurity.com·26w

Critical Vulnerabilities in Oracle E-Business Suite Marketing Administration - Kudelski Security Research Center

kudelskisecurity.com·29w

F5 Security Incident - Kudelski Security Research Center

kudelskisecurity.com·30w

Microsoft disclosed a zero-day vulnerability affecting the NetMan service - Kudelski Security Research Center

kudelskisecurity.com·30w

Log in to enable infinite scrolling