Silent Intrusion: ShadowPad Malware Found Embedded in Trusted Security Software Across Southeast Asian Telecoms Cyber Threat Intelligence AegironJanuary 27, 2026January 27, 202610 mins0 ShadowPad Malware Activity Targeting Telecommunications Providers Incident Overview – January 27 In late January, a targeted intrusion…continue reading..
CVE-2026-22696: Critical dcap-qvl Flaw Lets Attackers Forge SGX/TDX Attestations and Bypass Trust Vulnerabilities AegironJanuary 27, 2026January 27, 202610 mins0 CVE-2026-22696 – dcap-qvl Missing Cryptographic Enforcement CVE: CVE-2026-22696Name: dcap-qvl missing verification for QE IdentityCVSS Score: 9.3 (Critical)Severity:…continue reading..
CVE-2026-22709: Critical vm2 Sandbox Flaw Lets Untrusted JavaScript Break Free and Execute Code on Host Systems Vulnerabilities AegironJanuary 27, 2026January 27, 202610 mins0 CVE-2026-22709 – vm2 Node.js Sandbox Escape Vulnerability Overview CVE ID: CVE-2026-22709Affected Component: vm2 (Node.js JavaScript sandbox)Vulnerability Type:…continue reading..
CVE-2025-66719: Critical free5GC NRF Flaw Enables Unauthorized 5G Core Access Vulnerabilities AegironJanuary 27, 2026January 27, 202611 mins0 Improper OAuth2 scope validation allows attackers to obtain high-privilege access tokens without authorization Vulnerability Overview CVE ID:…continue reading..
CVE-2026-24540: WordPress Google Drive Plugin Flaw Exposes Sites to Full Admin Takeover Vulnerabilities AegironJanuary 27, 2026January 27, 20268 mins0 Vulnerability Overview (At a Glance) Official Patch / Upgrade Link Detailed Vulnerability Description A missing authorization flaw…continue reading..
CVE-2025-13952: Critical GPU Shader Compiler Flaw Enables Remote Privilege-Level Code Execution Vulnerabilities AegironJanuary 27, 2026January 27, 202611 mins0 CVE-2025-13952 — GPU Shader Compiler Vulnerability CVE: CVE-2025-13952Name: GPU Shader Compiler Use-After-Free → WriteCVSSv3 Score: 9.8 (Critical)Severity:…continue reading..
CVE-2026-24307: Critical Microsoft 365 Copilot Flaw Exposes Cross-Tenant Data, Puts Enterprise Information at Risk Vulnerabilities AegironJanuary 27, 2026January 27, 202611 mins0 CVE-2026-24307 — Microsoft 365 Copilot Information Disclosure Vulnerability CVE ID: CVE-2026-24307Severity: CriticalCVSS v3.1 Score: 9.3 (Critical)Exploitability: Remote…continue reading..
CVE-2026-24305: Critical Azure Entra ID Authorization Flaw Opens Door to Silent Privilege Escalation and Tenant-Wide Identity Takeover Vulnerabilities AegironJanuary 27, 2026January 27, 202610 mins0 CVE Details (At a Glance) Description CVE-2026-24305 is a critical authorization vulnerability in Azure Entra ID where…continue reading..
CVE-2025-70982: Critical SpringBlade Flaw Lets Low-Privilege Users Create Accounts and Bypass Access Controls Vulnerabilities AegironJanuary 27, 2026January 27, 20268 mins0 Vulnerability Overview CVE ID: CVE-2025-70982Product: SpringBladeAffected Component: User import functionality (importUser)Vulnerability Type: Access Control Bypass / Improper…continue reading..
CVE-2016-15057: Critical Apache Continuum RCE Resurfaces as Retired CI Tool Remains Unpatched Vulnerabilities AegironJanuary 27, 2026January 27, 20269 mins0 CVE-2016-15057 – Apache Continuum Command Injection (Unauthenticated Remote Code Execution) CVE ID: CVE-2016-15057Affected Product: Apache ContinuumVulnerability Type:…continue reading..
