Business Customer Reports
Experienced any inconvenience?
Let us know right away.
Resources
All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.
April 25, 2025
What’s the Real Solution for Email Security?
A single link can drain your crypto wallet or shut down your business. AI-powered phishing is getting smarter — here’s how to fight back with the Criminal IP Malicious Link Detector. ▶️Download: https://appsource.microsoft.com/en-us/product/office/WA200007637?tab=Overview Visit…
April 24, 2025
[Notice] Criminal IP Free Plan Feature Enhancement (Scheduled Release: April 28, 2025)
Dear Criminal IP Users, Thank you for using Criminal IP. To deliver more powerful threat intelligence, we are enhancing the user experience across our plans effective April 28, 2025. In particular, we’ve made adjustments so that more users can experience the value of Criminal IP…
![[Notice] Criminal IP Free Plan Feature Enhancement (Scheduled Release: April 28, 2025)](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2025%2F04%2F%25EB%25AC%25B4%25EB%25A3%258C%25ED%2594%258C%25EB%259E%259C%25EA%25B3%25B5%25EA%25B3%25A0_eng.png%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
April 18, 2025
Response Strategy for Ivanti VPN Vulnerability CVE-2025-22457: CTI-Based Attack Surface Detection
Ivanti has released a patch for a critical vulnerability identified as CVE-2025-22457, which affects several of its security products, including Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways. This stack-based buffer overflow vulnerability…
April 15, 2025
Criminal IP Threat Intelligence Integrated with Fortinet: Automated FortiSOAR Connector Released
AI SPERA has officially launched the Criminal IP connector for Fortinet’s FortiSOAR, a leading Security Orchestration, Automation, and Response (SOAR) platform. Fortinet, a global cybersecurity leader, provides FortiSOAR with the ability to integrate diverse security tools and…
April 10, 2025
[Criminal IP v1.77.0] 2025-04-10 Release Note
An update to Criminal IP v1.77.0 has been released. [Criminal IP v1.77.0] Regular Maintenance and Update Release Note Maintenance Period: 2025.04.10 05:00~10:00 AM (UTC) [New Changes] Added custom User Agent feature for full URL scan in Domain Search. You can now set a User…
![[Criminal IP v1.77.0] 2025-04-10 Release Note](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2025%2F04%2Fv1.77.0-release-note.jpg%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
April 8, 2025
Next.js Middleware Vulnerability Allows Authentication Bypass: Over 520K Assets at Risk
On March 21, 2025, an authentication bypass vulnerability in Vercel’s Next.js framework, identified as CVE-2025-29927, was disclosed. This article outlines the threat posed by the CVE-2025-29927 vulnerability in Next.js middleware, analyzes exposed instances affected by the…
April 2, 2025
Analysis of AMI MegaRAC BMC Vulnerability: Criminal IP-Based Detection Strategies
A critical security vulnerability was recently discovered in the AMI MegaRAC Baseboard Management Controller (BMC), which is widely used by numerous server manufacturers. This vulnerability allows attackers to bypass authentication on the Redfish management interface, posing a…
March 28, 2025
[Criminal IP v1.76.0] 2025-03-27 Release Note
An update to Criminal IP v1.76.0 has been released. [Criminal IP v1.76.0] Regular Maintenance and Update Release Note Maintenance Period: 2025.03.27 05:00~10:00 AM (UTC) [Improvement] Added GitHub Reference 43 new repositories have been added to the Open-source Use Cases and…
![[Criminal IP v1.76.0] 2025-03-27 Release Note](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2025%2F03%2Fimage-2025-3-27_11-12-12.jpg%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
March 25, 2025
CVE-2025-24813: Apache Tomcat RCE Vulnerability and Data Exposure
A newly discovered vulnerability, CVE-2025-24813, has been found in Apache Tomcat. This flaw may lead to Remote Code Execution (RCE), data exposure, or file corruption. Under certain conditions, attackers could execute malicious code or access and modify sensitive files. The…
March 14, 2025
CVE-2024-53900 & CVE-2025-23061 RCE Vulnerabilities in Mongoose: Security Threats Exposure and Countermeasures
Recently, OPSWAT analyzed the Proof of Concept (PoC) for two critical vulnerabilities, CVE-2024-53900 and CVE-2025-23061, in Mongoose, the Object Data Modeling (ODM) library for MongoDB and Node.js, on their blog. When exposed to the internet, Mongoose can pose serious security…
March 13, 2025
[Criminal IP v1.75.0] 2025-03-13 Release Note
An update to Criminal IP v1.75.0 has been released. [Criminal IP v1.75.0] Regular Maintenance and Update Release Note Maintenance Period : 2025.03.13 05:00~10:00 AM (UTC) [New Changes] Knowledge Hub New Categories – Report Criminal IP’s Knowledge Hub, which centralizes technical…
![[Criminal IP v1.75.0] 2025-03-13 Release Note](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2025%2F03%2FRelease-Note_v1.75.0_EN.jpg%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
March 13, 2025
7 Ways to Leverage Threat Intelligence (TI) in Security Operations
Intergrating Threat Intelligence to Maximize Synergy Across Security Products Threat Intelligence (TI) is the foundation of modern cybersecurity, delivering real-time insights into emerging threats, hacker tactics, and malicious infrastructures. By integrating TI into security…
Join AI SPERA
Be part of the AI SPERA journey.
