Happy Ransomware: A Silent MedusaLocker Variant Actively Crippling Enterprise Networks Cyber Threat Intelligence AegironJanuary 22, 2026January 22, 20269 mins0 Happy Ransomware (MedusaLocker family – Enterprise-targeted ransomware)Discovery timeframe: January 2026Target profile: Medium to large enterprise networksImpact type:…continue reading..
Osiris Ransomware: How a Trusted Driver Was Turned Into a Weapon to Kill Security and Encrypt Enterprises Cyber Threat Intelligence AegironJanuary 22, 202610 mins0 Osiris Ransomware – BYOVD-Based Attack Using POORTRY Driver Initial Discovery: January 22Attack Type: Ransomware with Security Bypass…continue reading..
Critical Alert: Crafted AI Model Files Can Crash Ollama Services Remotely Vulnerabilities AegironJanuary 22, 2026January 22, 202610 mins0 Product context Product: OllamaFunction: Local and server-based runtime for large language modelsPrimary Use Case: Model creation, import,…continue reading..
CVE-2026-22598: ManageIQ API Input Flaw Triggers Platform-Wide Denial of Service Vulnerabilities AegironJanuary 22, 2026January 22, 20269 mins0 CVE ID: CVE-2026-22598Affected Product: ManageIQVulnerability Type: Denial of Service (DoS) via improper input validationSeverity: HighCVSS Score: 7.1Attack…continue reading..
Critical Node.js Vulnerabilities Expose File Systems, Secrets, and Service Availability Vulnerabilities AegironJanuary 22, 2026January 22, 20268 mins0 Product Details Product Name: Node.jsProduct Type: Server-side JavaScript runtimeAffected Components: Core runtime engine, filesystem access layer, memory…continue reading..
CVE-2025-69285: Unauthenticated File Upload in SQLBot Allows Silent Database Overwrite Vulnerabilities AegironJanuary 22, 2026January 22, 20269 mins0 Unauthenticated File Upload Leading to Database Overwrite Vulnerability Overview CVE ID: CVE-2025-69285Affected Product: SQLBotVulnerability Type: Missing Authentication…continue reading..
CVE-2026-22849: Saleor Stored XSS Flaw Enabling Silent Token Theft and Admin Session Takeover Vulnerabilities AegironJanuary 22, 2026January 22, 20269 mins0 CVE ID: CVE-2026-22849Product: Saleor (e-commerce platform)Vulnerability Type: Stored Cross-Site Scripting (XSS)Impact Focus: Authentication token theft, session hijackingCVSS…continue reading..
CVE-2026-22807: Pre-Authentication Remote Code Execution via Unsafe Model Loading in vLLM Vulnerabilities AegironJanuary 22, 2026January 22, 202611 mins0 CVE ID: CVE-2026-22807Affected Component: vLLM (model loading / auto_map resolution)Vulnerability Type: Unsafe model loading leading to Remote…continue reading..
Critical Seroval Vulnerabilities Expose Servers to Remote Takeover and Denial-of-Service Attacks Vulnerabilities AegironJanuary 22, 2026January 22, 20268 mins0 Product Security Overview Product Name: SerovalProduct Type: Server-side JavaScript–based application framework / service runtimeDeployment Models Affected: On-premise,…continue reading..
CVE-2026-23960: Stored XSS in Argo Workflows Enables Browser-Based Privilege Abuse Vulnerabilities AegironJanuary 22, 2026January 22, 20269 mins0 Vulnerability Overview CVE ID: CVE-2026-23960Product: Argo WorkflowsVulnerability Type: Stored Cross-Site Scripting (Stored XSS)Impact Category: Privilege Abuse /…continue reading..
