Business Customer Reports
Experienced any inconvenience?
Let us know right away.
Resources
All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.
August 12, 2026
Unauthenticated Server File Read in Gitea: CVE-2026-59774 Analysis
On August 2, 2026, a critical vulnerability, CVE-2026-59774, was disclosed in Gitea, a self-hosted Git platform, allowing unauthenticated attackers to read arbitrary files from the server. The vulnerability is rated CVSS v3.1 9.8 (Critical) and is classified as an…
August 10, 2026
N-able N-central Authentication Bypass: CVE-2026-18577 Analysis
In late July 2026, CVE-2026-18577, an authentication bypass vulnerability affecting the N-able N-central remote monitoring and management platform, was confirmed to have been actively exploited in attacks. N-central is a Remote Monitoring and Management (RMM) platform used by…
August 7, 2026
Multi-Product Visibility and Certificate Risk Detection Update
This update enhances IP asset analysis by displaying multiple products associated with an open port and introduces three new certificate risk categories for identifying potentially unsafe or improperly configured TLS certificates. Maintenance Schedule v1.104.0: 2026.08.06…
August 5, 2026
Arbitrary File Read via Image Upload: An Analysis of Ruby on Rails CVE-2026-66066
In July 2026, a critical vulnerability, CVE-2026-66066, was disclosed in Ruby on Rails Active Storage, affecting applications that allow untrusted users to upload images. Rated CVSS 9.5 (Critical), the vulnerability enables attackers to read arbitrary files accessible to the…
August 3, 2026
TeamCity On-Premises CVE-2026-63077: Unauthenticated Server Compromise Vulnerability Analysis
On July 27, 2026, JetBrains disclosed CVE-2026-63077, a critical unauthenticated remote code execution (RCE) vulnerability affecting TeamCity On-Premises, its CI/CD server solution. The vulnerability has been assigned a CVSS v3.1 score of 9.8 (Critical) and is caused by an…
July 29, 2026
TI Feed Feature Release
Maintenance Schedule v1.100.1: 2026.07.27 (05:00-10:00 UTC) Overview 📃 This update introduces TI Feed, a new feature that provides threat IP data collected and analyzed by Criminal IP as a subscription-based feed. Enterprise TI plan customers can view their TI License key on…
July 29, 2026
Steam Forum ClickFix Attack: Analyzing XMRig Distribution Infrastructure with Criminal IP
A ClickFix attack was recently identified on Steam discussion forums, where malicious PowerShell commands were disguised as solutions to gaming and PC-related issues. According to a BleepingComputer report published on July 25, 2026, the attacker used randomly created Steam…
July 22, 2026
Criminal IP Achieves Highest-Level PCI DSS Certification for Fourth Consecutive Year
Criminal IP has renewed its certification for Payment Card Industry Data Security Standard (PCI DSS) v4.0.1 at the highest level, Level 1. With this renewal, Criminal IP has maintained the highest level of PCI DSS certification for four consecutive years. Criminal IP Achieves…
July 22, 2026
RabbitMQ OAuth Secret Exposure Vulnerabilities: An Analysis of CVE-2026-57219 and CVE-2026-57221
In July 2026, two access control vulnerabilities were disclosed in the open-source message broker RabbitMQ. The more severe issue, CVE-2026-57219 (CVSS 8.7), allows an unauthenticated attacker to retrieve RabbitMQ’s OAuth client secret with a single HTTP request and exchange it…
July 16, 2026
Internet-Exposed Cisco IOS Management Interfaces: Why Legacy Network Devices Remain Attractive Targets
Recently, the CISA and the NSA warned that Russian state-sponsored threat actors continue to target vulnerable or misconfigured network routers. In their joint cybersecurity advisory, they specifically highlighted CVE-2008-4128, a long-standing vulnerability in the Cisco IOS…
July 15, 2026
Internet-Exposed Swagger UI: What API Documentation Reveals to Attackers
As generative AI, SaaS platforms, mobile applications, and cloud services continue to expand, core business functions are becoming increasingly API-driven. Behind the interfaces of modern web applications, APIs handle a wide range of functions, including user authentication,…
July 10, 2026
Criminal IP Threat Intelligence Integration with the Torq AI SOC Platform
Criminal IP has partnered with Torq, an AI SOC platform company for autonomous security operations, and has integrated with the Torq AI SOC Platform. Torq is an agentic security operations platform that helps security teams automatically triage, investigate, and respond to large…
Join AI SPERA
Be part of the AI SPERA journey.
