kev

Jul 20

July "In the Trend of VM" (#29): Microsoft Exchange Server vulnerability

Alexander Leonov

July "In the Trend of VM" (#29): Microsoft Exchange Server vulnerability. Here is my traditional monthly roundup of trending vulnerabilities, according to Positive Technologies. The previous June edition featured four vulnerabilities. This time, there's only one. 🗞 Post on Habr (rus) 🗒 Digest on...

xss javascript github microsoft exchange outlook vulnerability exploit spoofing kev cisa em positivetechnologies owa esu eomt cisakev trendvulns edge

Jul 07

CISA KEV’s Revolving Door

jericho

Some time ago, perhaps last year or two years ago during VulnCon, I made an offhand comment about Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerability (KEV) catalog and how there were more than one vulnerability that had appeared in it and were subsequently...

infosec kev greynoise attackerkb grant willcox jacob baines cisa

Jul 03

F5 Contributes to KEV Confusion

jericho

F5 is a technology vendor that sells a variety of networking technology including security products. With a considerable security portfolio and long tenure in the industry they are well positioned to observe known exploited vulnerabilities (KEV). Their staff frequently write blogs about threat...

infosec kev vulnerability disclosure forensics fortinet f5 vulnerability archaeology

Jul 02

About Cross Site Scripting - Microsoft Exchange (CVE-2026-42897) vulnerability

Alexander Leonov

About Cross Site Scripting - Microsoft Exchange (CVE-2026-42897) vulnerability. The vulnerability was fixed on May 14 outside the regular Microsoft Patch Tuesday cycle. Improper neutralization of input during web page generation (CWE-79, XSS) in Microsoft Exchange Server allows an unauthorized...

xss javascript github microsoft exchange outlook vulnerability exploit spoofing kev cisa em owa esu eomt cisakev edge

Jun 17

June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities

Alexander Leonov

June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities. Presenting the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. In the previous May edition, we covered four vulnerabilities. This time,...

linux eop fedora shodan ubuntu windows opensuse github kernel microsoft vulnerability panorama exploit firewall rhel kev apparmor redsun xfrmesp dirtyfrag centosstream v12 positivetechnologies panos cloudngfw paloalto kernelexploit nightmareeclipse microsoftdefender v4bel prismaaccess cisakev trendvulns lpe antimalware hyunwookim fragnesia linuxkernel defender almalinux ngfw rxrpc

Jun 06

About Elevation of Privilege - Microsoft Defender "RedSun" (CVE-2026-41091) vulnerability

Alexander Leonov

About Elevation of Privilege - Microsoft Defender "RedSun" (CVE-2026-41091) vulnerability. Microsoft Defender is a built-in security solution developed by Microsoft to protect the Windows operating system and user data from viruses, malware, and other cyber threats in real time. An improper link...

windows github microsoft vulnerability exploit kev redsun nightmareeclipse microsoftdefender cisakev antimalware defender

Jun 02

May Linux Patch Wednesday

Alexander Leonov

May Linux Patch Wednesday. A total of 1,638 vulnerabilities (474 in the Linux kernel). For comparison, in April there were 1,035 vulnerabilities (a record!). And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming....