Introduction to CVE-2026-25742 Vulnerability The cybersecurity landscape changes rapidly, and new vulnerabilities can pose risks to your infrastructure. The CVE-2026-25742 vulnerability in Zulip highlights the need for robust server security measures. System administrators and hosting providers must stay vigilant to protect Linux servers from potential threats. Understanding CVE-2026-25742 Prior to version 11.6, Zulip, an open-source […]

Understanding CVE-2026-26058: A Path Traversal Vulnerability in Zulip Zulip is an open-source team collaboration tool. Recently, a critical vulnerability, CVE-2026-26058, was discovered which could impact server security. This vulnerability exists from version 1.4.0 through to just before version 11.6, allowing attackers to exploit servers by leveraging path traversal techniques during the import process. What Happened? […]

Introduction to CVE-2026-25742 Vulnerability The cybersecurity landscape changes rapidly, and new vulnerabilities can pose risks to your infrastructure. The CVE-2026-25742 vulnerability in Zulip highlights the need for robust server security measures. System administrators and hosting providers must stay vigilant to protect Linux servers from potential threats. Understanding CVE-2026-25742 Prior to version 11.6, Zulip, an open-source […]

Understanding CVE-2026-26058: A Path Traversal Vulnerability in Zulip Zulip is an open-source team collaboration tool. Recently, a critical vulnerability, CVE-2026-26058, was discovered which could impact server security. This vulnerability exists from version 1.4.0 through to just before version 11.6, allowing attackers to exploit servers by leveraging path traversal techniques during the import process. What Happened? […]

Our world would be insecure without bug bounty platforms. We don’t know who we can or cannot trust. If we find a vulnerability in a software as a white hat hacker, we would be afraid to report it to the software owners because we wouldn’t know what their reaction would be. Will they reward or […]

The “Hello, Peppa!” botnet and the /ept/out.php vulnerability were newly discovered attacks by our Attack Vector Miner. But now, it has recognized the reactivation of a forgotten IoT botnet. This botnet exploits the D-Link router DSL-2750B  remote command execution. What does the attack look like?  The discovered pattern is the /login.cgi?cli= as you can see below:  In the case of the D-Link router DSL-2750B firmware 1.01 to 1.03, there’s an option for remote command […]

In a previous article, we’ve discussed the BitNinja safe minimum ruleset for the BitNinja WAF, that consists of 15 rules from the OWASP Core Ruleset, along with 6 rules from the BitNinja rules category. These rules can be safely enabled on the root location pattern on your server. In the BitNinja Ruleset, there are 5 […]

After the “Hello, Peppa!”  zero-day botnet, our Attack Vector Miner detected another zero-day vulnerability.  Some vulnerable websites contain an /ept/out.php file, which can work as an open proxy. That’s why the attacker scans the /ept/out.php file. Let’s see an example:  The number of these attacks started to increase on July 11th, and as we can see in the diagram below, the botnet’s activity is slowing down […]

Our Attack Vector Miner (based on AI) is a very effective tool to identify 0. day attacks. Here comes the first catch! Discovery of a New Botnet At the beginning of July, our Attack Vector Miner created a new cluster, filled with logs about a new type of botnet. We perceived the first incident on […]

In the preceding articles, I’ve talked a lot about the BitNinja safe minimum ruleset template and how you should enable it on your “/” location (or on “*/wp-admin/*” if needed) if you’re hosting mainly WordPress websites. So I’d like to give you a little more explanation about the rules that are part of the safe […]

Content Management Systems (CMS) are highly vulnerable to zero-day attacks recently. Lately, the Drupal was picked on by the hackers. Now the ModX CMS is in the target. CVE-2018-1000207: The new MODX vulnerability Two critical vulnerabilities have been found in MODX Revolution <= 2.6.4 in the past few days. Exploiting it, the hackers can remote […]

We are checking in with an unusual article. We would like to share an upcoming story about a great Journey, which will start on 28th of July. Why is it worth mentioning? Well, one member of this great Adventure is one of our Ninjas, and we’re really proud of him. They will travel around Northern […]

Artificial Intelligence (AI) is spreading quickly in many industries, and we can gladly announce the Attack Vector Miner, one of our latest developments based on AI. But before we tell you more about that, let’s get a bit more familiar with AI. If you’re an AI expert, know everything about it, and are only curious […]

CVE-2026-28766: A Critical Vulnerability in Gardyn Cloud API The Gardyn Cloud API has exposed a severe vulnerability known as CVE-2026-28766. This critical flaw allows unauthorized access to all user account data without any authentication requirements. Understanding the Incident This vulnerability has been given a CVSS score of 9.3, indicating a critical risk level. It enables […]

Understanding CVE-2026-28767: A Critical Vulnerability In recent cybersecurity news, a major vulnerability has been identified as CVE-2026-28767. This flaw in the Gardyn Cloud API allows unauthorized access to sensitive administrative endpoints. It raises significant concerns for server security, particularly for system administrators and hosting providers. Details of the Vulnerability The CVE-2026-28767 vulnerability relates to a […]

Critical Vulnerability in Gardyn Cloud API: CVE-2026-25197 The recent discovery of a severe vulnerability in the Gardyn Cloud API has raised significant alarms in the cybersecurity community. This vulnerability, known as CVE-2026-25197, allows authenticated users to access other user profiles by modifying the ID number within the API call. This oversight opens the door to […]