Business Customer Reports
Experienced any inconvenience?
Let us know right away.
Resources
All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.
May 21, 2026
CVE-2026-41940: Analysis of the cPanel Authentication Bypass Vulnerability
In late April 2026, the critical authentication bypass vulnerability CVE-2026-41940 affecting cPanel & WHM was publicly disclosed. The vulnerability was rated CVSS 9.8 (Critical) and involves a structural flaw that allows unauthenticated remote attackers to gain unauthorized…
May 15, 2026
CVE-2026-6644 Analysis: Command Injection Vulnerability in ASUSTOR ADM PPTP VPN Client
A critical command injection vulnerability, CVE-2026-6644, was recently disclosed in ADM (ASUSTOR Data Master), the NAS operating system used by ASUSTOR devices. The vulnerability was found in the PPTP VPN Client feature of ADM and allows an attacker with administrator…
May 13, 2026
CVE-2026-3854: GitHub RCE Vulnerability Triggered by a Single git push
On March 4, 2026, a critical remote code execution (RCE) vulnerability, CVE-2026-3854, affecting both GitHub Enterprise Server and GitHub.com was reported through GitHub’s bug bounty program. Upon receiving the report, GitHub deployed a fix for GitHub.com within two hours and…
May 11, 2026
CVE-2026-42208: LiteLLM SQL Injection Vulnerability Targeting AI Gateways
On April 24, 2026, the critical SQL injection vulnerability CVE-2026-42208 affecting the open-source AI gateway LiteLLM was disclosed in the GitHub Advisory Database. Just 36 hours and 7 minutes after disclosure, real-world exploitation was already observed. Rated CVSS 9.3…
May 4, 2026
Persistent Threats Beyond Patching: Analysis of the FIRESTARTER Backdoor Targeting Cisco ASA
In April 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK’s National Cyber Security Centre (NCSC) released a joint advisory on a newly identified backdoor named “FIRESTARTER,” deployed by the state-linked APT group UAT-4356 targeting Cisco…
May 1, 2026
Criminal IP Integration with Securonix ThreatQ Platform
Criminal IP, a cyber threat intelligence platform, has been integrated with Securonix’s threat intelligence operations platform, ThreatQ. ThreatQ is a Threat Intelligence Platform (TIP) that centralizes, aggregates, and prioritizes threat data from multiple sources, serving as a…
April 27, 2026
nginx-ui MCPwn (CVE-2026-33032) Analysis: Nginx Server Compromise via Missing MCP Authentication
In March 2026, a critical authentication bypass vulnerability, CVE-2026-33032, was disclosed in the open-source Nginx management tool nginx-ui. Nicknamed “MCPwn,” this vulnerability received a CVSS v3.1 score of 9.8 (Critical) and has been confirmed to be actively exploited in…
April 27, 2026
Analyzing Phishing Infrastructure and Attack Patterns Using Daily Malicious Phishing Data
Phishing remains one of the most persistent and practical cybersecurity threats today. Attackers no longer rely on a single infrastructure; instead, they continuously rotate domains, platforms, and content to evade detection. So what does real-world phishing infrastructure…
April 22, 2026
CVE-2026-35616: Exploitation Trends and Exposure Analysis of Fortinet FortiClient EMS
In April 2026, active exploitation of a newly disclosed vulnerability in Fortinet FortiClient EMS, tracked as CVE-2026-35616, was observed in the wild. This vulnerability originates from flaws in the request handling logic of the EMS server and may lead to remote code execution…
April 17, 2026
Introducing the New Phishing Scan Mode
Maintenance Period v1.99.0: 2026.04.16 (05:00-10:00 UTC) Summary 📃 Version 1.99.0 introduces the new Phishing Scan mode for URL/Domain scanning, providing users with a dedicated detection capability to identify phishing sites and fraudulent web pages. This update expands…
April 17, 2026
CVE-2026-34197: Apache ActiveMQ RCE Vulnerability Analysis
In April 2026, a remote code execution (RCE) vulnerability, CVE-2026-34197, was disclosed in Apache ActiveMQ Classic, remaining undiscovered for over 13 years. Rated 8.8 (High) under CVSS v3.1, this vulnerability stems from a complex interaction between the Jolokia management…
April 13, 2026
Analyzing a FIFA-Themed Phishing Campaign: Tracking Suspicious 2026 World Cup-Related Domains and Infrastructure
International sporting events are highly effective social engineering lures for attackers. In particular, globally recognized events such as the FIFA World Cup are repeatedly abused in phishing campaigns impersonating ticket purchases, official reservations, and event…
Join AI SPERA
Be part of the AI SPERA journey.
