⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A new offensive reconnaissance and attack tool called RAVEN has been discovered targeting vulnerable Elasticsearch nodes. Developed by LevelBlue SpiderLabs, RAVEN exploits misconfigured or unsecured Elasticsearch instances to perform reconnaissance and potentially compromise sensitive data.
You have almost certainly interacted with Elasticsearch today.
The article introduces RAVEN, an offensive reconnaissance and attack tool for vulnerable Elasticsearch nodes. It highlights how Elasticsearch handles sensitive data across many applications, making it a critical target for attackers.
Ruby on Rails released fixes for CVE-2026-66066, a critical Active Storage vulnerability (CVSS 9.5) that allows unauthenticated attackers to read arbitrary server files through crafted image uploads when libvips is used for image processing. The flaw can expose secret_key_base, Rails master key, database passwords, cloud storage credentials, and API tokens, potentially enabling remote code execution or lateral movement.
Ruby on Rails has addressed a critical vulnerability in Active Storage, tracked as CVE-2026-66066 (CVSS score: 9.5), which allows unauthenticated attackers to read arbitrary files from application servers by uploading crafted images. This flaw exposes sensitive data such as secret keys, database passwords, and API tokens, potentially enabling remote code execution (RCE) or lateral movement within connected systems.
Health-ISAC is warning healthcare and medical technology organizations about a significant increase in successful attacks by the ShinyHunters extortion gang. The threat actors specialize in supply chain and identity attacks, using voice phishing (vishing) to manipulate employees and helpdesk personnel into resetting passwords, changing MFA methods, or enrolling new devices.