/
initial_access_vector:exploit_public_facing × victim_sectors:technology × criticity:medium × limpar

Resultados

3 casos · pág. 1/1

greynoise.io · medium

GreyNoise: Scanning surges against network edge vendors precede CVE disclosure by a median of 11 days

GreyNoise analyzed 147.8 million sessions over 103 days across 276 vendor-specific tags covering 18 network infrastructure vendors. It found that surges in scanning and exploitation activity regularly precede vendor advisories. Of 104 detected surges, 68 preceded a vendor-matched CVE (33 vulnerabilities across 16 vendor families), with a …

haveibeenpwned.com · medium

Double Counter Discord protection service breached via Metabase flaw; 275k emails and usernames leaked

In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. The company's disclosure notice states that attackers accessed a subset of its data. That data was later published publicly and contains about 275k unique email addresses and Discord us…

securityweek.com · medium

Rapid7 Q3 2026: High-severity flaws exploited in 3 days on average, ransomware dominates, AI limited to 8% of incidents

Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…