A Critical Security Alert for ColdFusion Users Recently, a significant vulnerability was discovered in ColdFusion versions 2023.19, 2025.8, and earlier. This flaw relates to improper input validation. Understanding the Vulnerability This critical security issue could enable an attacker to execute arbitrary code within the context of the current user. Disturbingly, exploitation of this vulnerability does […]

Understanding CVE-2026-47929: A Critical ColdFusion Vulnerability The cybersecurity landscape continues to evolve, presenting new challenges for hosting providers and system administrators. Recently, a critical vulnerability in ColdFusion was reported, identified as CVE-2026-47929. This flaw affects ColdFusion versions 2023.19, 2025.8, and earlier, posing significant risks to server security. What is CVE-2026-47929? This vulnerability involves incorrect authorization […]

A Critical Security Alert for ColdFusion Users Recently, a significant vulnerability was discovered in ColdFusion versions 2023.19, 2025.8, and earlier. This flaw relates to improper input validation. Understanding the Vulnerability This critical security issue could enable an attacker to execute arbitrary code within the context of the current user. Disturbingly, exploitation of this vulnerability does […]

Understanding CVE-2026-47929: A Critical ColdFusion Vulnerability The cybersecurity landscape continues to evolve, presenting new challenges for hosting providers and system administrators. Recently, a critical vulnerability in ColdFusion was reported, identified as CVE-2026-47929. This flaw affects ColdFusion versions 2023.19, 2025.8, and earlier, posing significant risks to server security. What is CVE-2026-47929? This vulnerability involves incorrect authorization […]

A critical vulnerability was found in Contact Form 7. The WordPress utility is activated on more than 5 million websites, and 70% of these are running the unprotected 5.3.1 version or older. The vulnerability allows attackers to bypass Contact Form 7’s filename sanitization and upload a file that can be executed as a script file on the host server.

BitNinja has become a finalist this week in the international Cloud Computing Awards program, The Cloud Awards. Since 2011, The Cloud Awards has sought to promote and celebrate excellence and innovation in cloud computing. Entries are throughout the globe and across multiple industry sectors. Categories for the 2020-21 Cloud Awards include “Cloud Project of the […]

The Business Intelligence Group announced that they had awarded BitNinja Technologies the 2020 Stratus Award for Cloud Computing in the security category.  “BitNinja is at the forefront of the cloud helping to drive practical innovations in the cloud,” said Maria Jimenez, Chief Nominations Officer of Business Intelligence Group. “The cloud is now part of the […]

Researchers have found a vulnerability in cPanel and WHM. With a zero-day attack that is a brute force, hackers can easily bypass the 2-Factor Authentication (2FA). The SEC-575 vulnerability allowed attackers to try limitless 2FA codes until finding the right one and gain access to the account. Usually, brute force attacks take more hours or […]

Renowned hacker Kevin Mitnick hacked into San Diego’s Supercomputer Center to access the device of Tsutomu Shimomura. Interestingly, Shimomura was a computer researcher who was on a mission to track down and capture Mitnick! So, when did this happen? And why was his guard down? Because it was Christmas and Black Friday! The above example […]

BitNinja received the Business Intelligence Group’s BIG Award for Business and was named 2020 Small Business of the Year. The BIG’s annual programme rewards companies, products, and people that are leading their respective industries.  “It’s a great honor to be named as a winner of the BIG Award. This trophy shows us that hard work, […]

Have you ever wondered what BitNinja can do if an account on your server has been stolen or someone gets access via a hacked SSH?  Perhaps some customers store their passwords on a sticky note, or, for example, an account has been purchased to gain access to the server to infect it with malware uploads. […]

After last year’s €500,000 seed investment, BitNinja has raised $2.5 million in Series A funding, led by Lead Ventures. Our history BitNinja was founded in 2014 and became very profitable by the following year. In December, 2015 we were one of the eight selected start-ups in Cyber London’s second accelerator programme. In November, 2019 we […]

On 2 September 2020 arstechnica reported a zero-day vulnerability in a WordPress plugin. File Manager helps users manage their files on the website. It was downloaded 700,000 times and more than half of the customers are affected. The vulnerability allowed hackers to execute commands and upload files on a website. How did the BitNinja team patch the vulnerability? We discovered the exploit with our Defense Robot. […]

Urgent Cybersecurity Alert: CVE-2026-47930 The recent discovery of CVE-2026-47930 highlights crucial vulnerabilities in ColdFusion versions 2023.19, 2025.8, and earlier. This improper input validation issue allows attackers to bypass security measures without requiring user interaction. Why This Matters for Server Admins For system administrators and hosting providers, understanding the implications of CVE-2026-47930 is critical. It poses […]

Understanding CVE-2026-41984 and Its Impact on Server Security The cybersecurity landscape constantly evolves, and new vulnerabilities emerge regularly. Recently, the CVE-2026-41984 vulnerability has raised concerns among system administrators and hosting providers. This use-after-free (UAF) flaw found in the package management module can jeopardize the integrity of services across affected systems. Summary of the Issue The […]

Overview of CVE-2026-41985 The cybersecurity landscape is continually evolving, and new threats emerge regularly. One significant threat to server security is the CVE-2026-41985 vulnerability in the package management module. Understanding this threat is essential for system administrators, hosting providers, and web server operators. What is CVE-2026-41985? CVE-2026-41985 is classified as a Use-After-Free (UAF) vulnerability. This […]