Search for a command to run...
Articles tagged with #penetration-testing
Originally published on satyamrastogi.com Cisco patched a DoS flaw in Crosswork Network Controller and NSO requiring manual reboots for recovery. Attack chains orchestration platform downtime into supply chain and OT network paralysis. Cisco Crossw...
Originally published on satyamrastogi.com 3 million FTP servers operating without encryption expose credentials and sensitive data to network interception. Red teams exploit plaintext protocols for initial access and lateral movement in enterprise e...
Originally published on satyamrastogi.com Basic-Fit's 1M member breach reveals systemic weaknesses in SaaS membership platforms. Attack likely leveraged credential compromise or API exploitation targeting customer databases without proper segmentati...
Originally published on satyamrastogi.com Analysis of PlugX RAT distribution through counterfeit Claude website. Exploitation chain combines DLL sideloading with supply chain targeting. Attack methodology, detection evasion, and hardening strategies...
Originally published on satyamrastogi.com ClawJacked vulnerability enables malicious websites to hijack local OpenClaw AI agents via WebSocket connection abuse, allowing remote command execution on victim systems. Executive Summary The ClawJacked v...
Originally published on satyamrastogi.com CVE-2026-2329 allows attackers to achieve remote code execution on Grandstream VoIP phones without authentication, leading to complete device compromise and call surveillance capabilities. Executive Summary...
