Business Customer Reports
Experienced any inconvenience?
Let us know right away.
Resources
All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.
June 4, 2026
Automatic Banner Identifier Extraction and Chip UI Update
Maintenance Schedule v1.100.0: 2026.06.04 (05:00–10:00 UTC) Summary 📄 This update introduces a new feature that automatically extracts key identifiers from banner content in Asset Search and IP Report and displays them as chip-style UI elements. Previously, users had to…
June 1, 2026
The Rise of AI-Generated Phishing Sites: Analyzing Phishing Infrastructure with Criminal IP
Generative AI-powered web development tools are rapidly changing how web services are built. The ability to create web pages and UI components through natural language prompts significantly improves development productivity. At the same time, however, it also provides attackers…
May 27, 2026
SonicWall SSL-VPN MFA Bypass Vulnerability: The Attack Surface Between “Patched” and “Protected”
In May 2026, ransomware-linked attacks associated with CVE-2024-12802 targeting SonicWall Gen6 SSL-VPN devices regained attention. The vulnerability stems from a structural flaw in how SSL-VPN authentication handles UPN (User Principal Name) and SAM (Security Account Manager)…
May 21, 2026
CVE-2026-41940: Analysis of the cPanel Authentication Bypass Vulnerability
In late April 2026, the critical authentication bypass vulnerability CVE-2026-41940 affecting cPanel & WHM was publicly disclosed. The vulnerability was rated CVSS 9.8 (Critical) and involves a structural flaw that allows unauthenticated remote attackers to gain unauthorized…
May 15, 2026
CVE-2026-6644 Analysis: Command Injection Vulnerability in ASUSTOR ADM PPTP VPN Client
A critical command injection vulnerability, CVE-2026-6644, was recently disclosed in ADM (ASUSTOR Data Master), the NAS operating system used by ASUSTOR devices. The vulnerability was found in the PPTP VPN Client feature of ADM and allows an attacker with administrator…
May 13, 2026
CVE-2026-3854: GitHub RCE Vulnerability Triggered by a Single git push
On March 4, 2026, a critical remote code execution (RCE) vulnerability, CVE-2026-3854, affecting both GitHub Enterprise Server and GitHub.com was reported through GitHub’s bug bounty program. Upon receiving the report, GitHub deployed a fix for GitHub.com within two hours and…
May 11, 2026
CVE-2026-42208: LiteLLM SQL Injection Vulnerability Targeting AI Gateways
On April 24, 2026, the critical SQL injection vulnerability CVE-2026-42208 affecting the open-source AI gateway LiteLLM was disclosed in the GitHub Advisory Database. Just 36 hours and 7 minutes after disclosure, real-world exploitation was already observed. Rated CVSS 9.3…
May 4, 2026
Persistent Threats Beyond Patching: Analysis of the FIRESTARTER Backdoor Targeting Cisco ASA
In April 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK’s National Cyber Security Centre (NCSC) released a joint advisory on a newly identified backdoor named “FIRESTARTER,” deployed by the state-linked APT group UAT-4356 targeting Cisco…
May 1, 2026
Criminal IP Integration with Securonix ThreatQ Platform
Criminal IP, a cyber threat intelligence platform, has been integrated with Securonix’s threat intelligence operations platform, ThreatQ. ThreatQ is a Threat Intelligence Platform (TIP) that centralizes, aggregates, and prioritizes threat data from multiple sources, serving as a…
April 27, 2026
nginx-ui MCPwn (CVE-2026-33032) Analysis: Nginx Server Compromise via Missing MCP Authentication
In March 2026, a critical authentication bypass vulnerability, CVE-2026-33032, was disclosed in the open-source Nginx management tool nginx-ui. Nicknamed “MCPwn,” this vulnerability received a CVSS v3.1 score of 9.8 (Critical) and has been confirmed to be actively exploited in…
April 27, 2026
Analyzing Phishing Infrastructure and Attack Patterns Using Daily Malicious Phishing Data
Phishing remains one of the most persistent and practical cybersecurity threats today. Attackers no longer rely on a single infrastructure; instead, they continuously rotate domains, platforms, and content to evade detection. So what does real-world phishing infrastructure…
April 22, 2026
CVE-2026-35616: Exploitation Trends and Exposure Analysis of Fortinet FortiClient EMS
In April 2026, active exploitation of a newly disclosed vulnerability in Fortinet FortiClient EMS, tracked as CVE-2026-35616, was observed in the wild. This vulnerability originates from flaws in the request handling logic of the EMS server and may lead to remote code execution…
Join AI SPERA
Be part of the AI SPERA journey.
