Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-35273: Oracle PeopleSoft Three-Flaw SSRF Chain Exploited by ShinyHunters — Detection and Remediation Guide
Introduction The critical Oracle PeopleSoft vulnerability that the ShinyHunters extortion group has been exploiting since May 2026 is not a ...
CVE-2026-96652 'Plex2Shell': CISA KEV Order — Detecting and Remediating the Plex Media Server SSRF Vulnerability
CISA has ordered federal agencies to remediate four newly added vulnerabilities in its Known Exploited Vulnerabilities (KEV) catalog — headl...
CISA KEV Alert: Plex Media Server, SiteGuard, and Siemens Software Center Exploited — Detection and Remediation Guide
CISA Adds Six Actively Exploited Vulnerabilities to the KEV Catalog On October 20, 2026, CISA added six new vulnerabilities to its Known Exp...
ICSA-26-280-01: CISA Malcolm Authentication Bypass and SSRF Flaws (CVE-2026-107336 et al.) — Detection and Remediation Guide
Introduction CISA has published ICSA-26-280-01 disclosing seven vulnerabilities in Malcolm, CISA's own open-source network traffic analysis ...
SAP October 2026 Patch Day: Maximum-Severity OAuth2 SSRF in Cloud SDK for Python — Detection and Remediation Guide
SAP's October 2026 Security Updates: A Maximum-Severity SSRF Hiding in Your Python Integrations SAP's October 2026 security patch day addres...
SonicWall SMA 1000 SSRF Under Active Attack: Detection, Hunting, and Remediation Guide
SonicWall SMA 1000 Maximum-Severity SSRF: Actively Exploited SonicWall customers are once again in a familiar and unenviable position: threa...
CVE-2026-102255: SonicWall SMA 1000 Pre-Auth SSRF Exploited Within Days of Patch — Detection and Remediation Guide
Introduction SonicWall SMA 1000 series appliances are under active attack. Within days of public disclosure, threat actors began probing and...
CVE-2026-102255: SonicWall SMA 1000 SSRF Under Active Exploitation — Detection and Remediation Guide
CVE-2026-102255: SonicWall SMA 1000 SSRF Under Active Exploitation SonicWall has released a patch for CVE-2026-102255, a server-side request...
CVE-2026-102255: SonicWall Pre-Auth SSRF Exploited Days After Disclosure — Detection and Remediation Guide
Overview SonicWall edge devices are once again in the crosshairs. CVE-2026-102255, a pre-authenticated Server-Side Request Forgery (SSRF) vu...