12 articles
Resecurity, Thursday, October 1st, 2026
Resecurity found a hard-coded session cookie secret in a yard management system that let testers forge sessions for any user.
more →
Resecurity, Thursday, July 30th, 2026
Resecurity examines how autonomous offensive security agents work and what defending against them requires.
more →
Resecurity, Tuesday, July 7th, 2026
Resecurity analyzes a landmark AI safety law and its compliance implications for the technology industry.
more →
Resecurity, Monday, July 6th, 2026
Resecurity breaks down CVE-2026-48282, an Adobe ColdFusion RDS path traversal flaw enabling remote code execution.
more → Resecurity, Monday, June 29th, 2026
Resecurity details how attackers map and target modern AI/ML infrastructure that traditional recon overlooks.
more →
Resecurity, Thursday, June 11th, 2026
Resecurity details the Anubis ransomware attack that crippled an Adriatic port authority.
more →
Resecurity, Friday, March 6th, 2026
Resecurity is proud to contribute to disrupting of Tycoon 2FA, a cybercriminal platform that generated more than 30 million bogus emails in a single month. The joint effort, led by Microsoft, Europol, and other industry partners, aimed to target its infrastructure responsible for tens of millions of fraudulent emails reaching over 500,000 organizations each month worldwide.
more →
Resecurity, Friday, February 6th, 2026
Clawdbot (recently rebranded as Moltbot) is part of a new wave of autonomous AI agents designed to move beyond passive conversation and into direct action. Unlike traditional AI chatbots that merely respond to prompts, Clawdbot can operate your system, control browsers, send messages, and execute workflows on your behalf. While this level of automation is powerful and appealing, it introduces a fundamentally different threat model.
more → Resecurity, October 3,2025
The Trinity of Chaos, a ransomware collective presumably associated with Lapsus$, Scattered Spider, and ShinyHunters groups, launched a Data Leak Site (DLS) on the TOR network containing 39 companies impacted by the attacks.
more → Resecurity, Wednesday, August 6th, 2025
In modern cloud environments, misconfigurations and insecure coding practices can open dangerous doors to attackers. One critical example is Server-Side Request Forgery (SSRF), a vulnerability that allows attackers to manipulate a server into making unintended requests.
more → Resecurity, Friday, August 1st, 2025
As reported by ISMG, nearly 150 different organizations' on-premises SharePoint servers have been exploited by attackers targeting the zero-day vulnerabilities now tracked as ToolShell. Early attacks have been attributed to China-linked groups, in some cases leading to Warlock ransomware infections.
more → Resecurity, Friday, July 25th, 2025
Resecurity conducted hundreds of VAPT (Vulnerability Assessment and Penetration Testing) engagements for customers of different sizes and profiles-ranging from Fortune 100 corporations to emerging start-ups looking to test their cybersecurity controls before going live. Interestingly enough, regardless of the maturity of the company, issues related to API and authorization were identified in many cases, especially when the application had been developed by a third party.
more →