Attackers Abuse Revoked EnCase Driver in BYOVD “EDR Killer” to Disable Endpoint Security After SonicWall VPN Breach Latest Cyber Attack CyberDefenderFebruary 5, 2026February 5, 202610 mins0 In early February 2026, Huntress responded to a sophisticated intrusion where attackers gained initial access through compromised…continue reading..
Amaranth-Dragon Exploits Newly Disclosed WinRAR Flaw to Launch Stealth Espionage Campaigns Across Southeast Asia CyberSecurity News CyberDefenderFebruary 5, 2026February 5, 20268 mins0 In 2025, a previously undocumented cyber espionage activity cluster tracked by Research under the name Amaranth-Dragon emerged…continue reading..
CVE-2026-25499: A Single Sudo Line Opens the Door to Full Root Takeover in Terraform-Proxmox Deployments Vulnerabilities AegironFebruary 4, 2026February 4, 20269 mins0 CVE-2026-25499 Component: terraform-provider-proxmoxVulnerability type: Insecure sudo recommendation leading to local privilege escalationCVSS v3.x score: Not officially assignedSeverity:…continue reading..
CVE-2025-69929: Critical Flaw in N3uron Web UI Exposes Admin Password Hashes, Enables Silent Privilege Takeover Vulnerabilities AegironFebruary 4, 2026February 4, 20269 mins0 Vulnerability Overview CVE-2025-69929 describes a critical design flaw in the N3uron Web UI authentication and user management…continue reading..
Critical Ivanti EPMM Flaw Allows Hackers to Take Over Systems Remotely Without Login Vulnerabilities AegironFebruary 4, 2026February 4, 20267 mins0 Ivanti Endpoint Manager Mobile — Unauthenticated Remote Code Execution Product: Ivanti Endpoint Manager Mobile (EPMM)Component(s) impacted: In-House…continue reading..
CVE-2024-5986: Critical H2O-3 Flaw Enables Remote Attackers to Write Files and Take Over Servers Vulnerabilities AegironFebruary 4, 2026February 4, 202610 mins0 CVE-2024-5986 — H2O-3 Arbitrary File Write Leading to Full Server Compromise High-Level Description In vulnerable versions of…continue reading..
CVE-2026-1432: Critical SQL Injection Flaw in Buroweb “Tablon” Endpoint Exposes Databases to Remote Takeover Vulnerabilities AegironFebruary 4, 2026February 4, 20268 mins0 Overview A critical SQL Injection vulnerability has been identified in the Buroweb application, specifically within the tablon…continue reading..
Critical SQL Injection Flaws Discovered in Django ORM and PostGIS Components Vulnerabilities AegironFebruary 4, 2026February 4, 20268 mins0 Product Details CVE Summary Table CVE Name CVE ID CVSS Score Severity Exploitability Exploit Availability Affected Area…continue reading..
CVE-2026-24936: Critical AD Domain Join Flaw Lets Hackers Take Over ASUSTOR NAS Without Login Vulnerabilities AegironFebruary 4, 2026February 4, 20268 mins0 Vulnerability Overview CVE-2026-24936 is a critical security vulnerability identified in ASUSTOR Data Master (ADM) versions 4.x and…continue reading..
CVE-2026-1814: Rapid7 Nexpose Flaw Exposes Weak Keystore Passwords, Putting Stored Credentials at Risk Vulnerabilities AegironFebruary 4, 2026February 4, 20268 mins0 CVE-2026-1814 Title: Rapid7 Nexpose – Weak Keystore Password GenerationCVE ID: CVE-2026-1814CVSS Base Score: 7.5Severity: HighAttack Vector: LocalPrivileges…continue reading..
