Blog | Atarus Offensive Security

top of page

Home
About
Services
Research
AI Pen Tests

REQUEST CONSULTATION

All Posts

Cisco's Week From Hell Is Not Over. A CVSS 9.8 Authentication Bypass in Their Server Management Platform Just Dropped. One HTTP Request. Full Admin. Below the OS.

Cisco's Week From Hell Is Not Over. A CVSS 9.8 Authentication Bypass in Their Server Management Platform Just Dropped. One HTTP Request. Full Admin. Below the OS.

Cisco's Week From Hell Is Not Over. A CVSS 9.8 Authentication Bypass in Their Server Management Platform Just Dropped. One HTTP Request. Full Admin. Below the OS.

Atarus Security Team

Apr 40 min read

$285 Million Drained in 12 Minutes. North Korea Did Not Hack the Code. They Social Engineered the Humans Who Signed the Transactions.

$285 Million Drained in 12 Minutes. North Korea Did Not Hack the Code. They Social Engineered the Humans Who Signed the Transactions.

$285 Million Drained in 12 Minutes. North Korea Did Not Hack the Code. They Social Engineered the Humans Who Signed the Transactions.

Atarus Security Team

Apr 30 min read

One Compromised Vulnerability Scanner. Fifteen Days. Cisco, the European Commission, and 29 EU Institutions. This Is How a Supply Chain Collapses.

One Compromised Vulnerability Scanner. Fifteen Days. Cisco, the European Commission, and 29 EU Institutions. This Is How a Supply Chain Collapses.

One Compromised Vulnerability Scanner. Fifteen Days. Cisco, the European Commission, and 29 EU Institutions. This Is How a Supply Chain Collapses.

Atarus Security Team

Apr 30 min read

The Trivy Supply Chain Attack Just Hit Cisco. ShinyHunters Stole 300 GitHub Repos, 3 Million Salesforce Records, and AWS Data. Government Personnel Records Are in the Breach.

The Trivy Supply Chain Attack Just Hit Cisco. ShinyHunters Stole 300 GitHub Repos, 3 Million Salesforce Records, and AWS Data. Government Personnel Records Are in the Breach.

The Trivy Supply Chain Attack Just Hit Cisco. ShinyHunters Stole 300 GitHub Repos, 3 Million Salesforce Records, and AWS Data. Government Personnel Records Are in the Breach.

Atarus Security Team

Apr 20 min read

Google Just Attributed the Axios Hack to North Korea. The Malware Is Called WAVESHAPER. Mandiant Says Crypto Theft Is Coming Next.

Google Just Attributed the Axios Hack to North Korea. The Malware Is Called WAVESHAPER. Mandiant Says Crypto Theft Is Coming Next.

Google Just Attributed the Axios Hack to North Korea. The Malware Is Called WAVESHAPER. Mandiant Says Crypto Theft Is Coming Next.

Atarus Security Team

Apr 10 min read

Axios Compromised: The Most Popular HTTP Client in JavaScript Was Backdoored With a Self-Deleting RAT. 100 Million Weekly Downloads. Both Branches Poisoned in 39 Minutes.

Axios Compromised: The Most Popular HTTP Client in JavaScript Was Backdoored With a Self-Deleting RAT. 100 Million Weekly Downloads. Both Branches Poisoned in 39 Minutes.

Axios Compromised: The Most Popular HTTP Client in JavaScript Was Backdoored With a Self-Deleting RAT. 100 Million Weekly Downloads. Both Branches Poisoned in 39 Minutes.

Atarus Security Team

Mar 310 min read

Iran's Handala Hacked the FBI Director's Personal Email. If Kash Patel's Gmail Is Not Safe, Neither Is Your CEO's.

Iran's Handala Hacked the FBI Director's Personal Email. If Kash Patel's Gmail Is Not Safe, Neither Is Your CEO's.

Iran's Handala Hacked the FBI Director's Personal Email. If Kash Patel's Gmail Is Not Safe, Neither Is Your CEO's.

Atarus Security Team

Mar 300 min read

Hardening Financial Kernels for High-Assurance Networks

Hardening Financial Kernels for High-Assurance Networks

Hardening Financial Kernels for High-Assurance Networks

Atarus Security Team

Mar 290 min read

Cloud Identity: The Crisis of Multi-Cloud Identity Sprawl

Cloud Identity: The Crisis of Multi-Cloud Identity Sprawl

Cloud Identity: The Crisis of Multi-Cloud Identity Sprawl

Atarus Security Team

Mar 290 min read

The Adversary Perspective: Red Teaming Critical Infrastructure

The Adversary Perspective: Red Teaming Critical Infrastructure

The Adversary Perspective: Red Teaming Critical Infrastructure

Atarus Security Team

Mar 290 min read

DarkSword: A Government-Grade iPhone Exploit Kit Just Leaked on GitHub. It Works Out of the Box. 221 Million Devices Are Vulnerable.

DarkSword: A Government-Grade iPhone Exploit Kit Just Leaked on GitHub. It Works Out of the Box. 221 Million Devices Are Vulnerable.

DarkSword: A Government-Grade iPhone Exploit Kit Just Leaked on GitHub. It Works Out of the Box. 221 Million Devices Are Vulnerable.

Atarus Security Team

Mar 290 min read

F5 Was Breached by a Nation-State. They Stole the Source Code. Now They Are Exploiting a Bug F5 Told You Was Just a DoS. It Is Pre-Auth RCE. CISA Says Patch by Monday.

F5 Was Breached by a Nation-State. They Stole the Source Code. Now They Are Exploiting a Bug F5 Told You Was Just a DoS. It Is Pre-Auth RCE. CISA Says Patch by Monday.

F5 Was Breached by a Nation-State. They Stole the Source Code. Now They Are Exploiting a Bug F5 Told You Was Just a DoS. It Is Pre-Auth RCE. CISA Says Patch by Monday.

Atarus Security Team

Mar 280 min read

CitrixBleed 3: A New Critical NetScaler Memory Leak Is About to Be Exploited and History Says You Have Days, Not Weeks

CitrixBleed 3: A New Critical NetScaler Memory Leak Is About to Be Exploited and History Says You Have Days, Not Weeks

CitrixBleed 3: A New Critical NetScaler Memory Leak Is About to Be Exploited and History Says You Have Days, Not Weeks

Atarus Security Team

Mar 270 min read

PolyShell: Attackers Are Hitting 57% of Vulnerable Magento Stores With a WebRTC Skimmer That Bypasses Every Content Security Policy

PolyShell: Attackers Are Hitting 57% of Vulnerable Magento Stores With a WebRTC Skimmer That Bypasses Every Content Security Policy

PolyShell: Attackers Are Hitting 57% of Vulnerable Magento Stores With a WebRTC Skimmer That Bypasses Every Content Security Policy

Atarus Security Team

Mar 260 min read

TeamPCP: How One Compromised Security Scanner Cascaded Into a Five-Ecosystem Supply Chain Attack Hitting 97 Million Downloads

TeamPCP: How One Compromised Security Scanner Cascaded Into a Five-Ecosystem Supply Chain Attack Hitting 97 Million Downloads

TeamPCP: How One Compromised Security Scanner Cascaded Into a Five-Ecosystem Supply Chain Attack Hitting 97 Million Downloads

Atarus Security Team

Mar 250 min read

FBI and CISA: Russian Intelligence Is Hijacking Signal and WhatsApp Accounts at Scale. Thousands Already Compromised.

FBI and CISA: Russian Intelligence Is Hijacking Signal and WhatsApp Accounts at Scale. Thousands Already Compromised.

FBI and CISA: Russian Intelligence Is Hijacking Signal and WhatsApp Accounts at Scale. Thousands Already Compromised.

Atarus Security Team

Mar 240 min read

Oracle Breaks Glass on Emergency Patch for Identity Manager RCE: The Second Critical Flaw in the Same Component in Five Months

Oracle Breaks Glass on Emergency Patch for Identity Manager RCE: The Second Critical Flaw in the Same Component in Five Months

Oracle Breaks Glass on Emergency Patch for Identity Manager RCE: The Second Critical Flaw in the Same Component in Five Months

Atarus Security Team

Mar 240 min read

Langflow RCE Exploited in 20 Hours From Advisory Alone: Attackers Are Harvesting Your AI Pipeline Keys

Langflow RCE Exploited in 20 Hours From Advisory Alone: Attackers Are Harvesting Your AI Pipeline Keys

Langflow RCE Exploited in 20 Hours From Advisory Alone: Attackers Are Harvesting Your AI Pipeline Keys

Atarus Security Team

Mar 230 min read

Interlock Ransomware Exploited a Cisco Firewall Zero-Day for 36 Days Before Anyone Knew

Interlock Ransomware Exploited a Cisco Firewall Zero-Day for 36 Days Before Anyone Knew

Interlock Ransomware Exploited a Cisco Firewall Zero-Day for 36 Days Before Anyone Knew

Atarus Security Team

Mar 190 min read

GlassWorm: Invisible Unicode Malware and Blockchain C2 Hit 400+ GitHub Repos, npm Packages, and VSCode Extensions

GlassWorm: Invisible Unicode Malware and Blockchain C2 Hit 400+ GitHub Repos, npm Packages, and VSCode Extensions

GlassWorm: Invisible Unicode Malware and Blockchain C2 Hit 400+ GitHub Repos, npm Packages, and VSCode Extensions

Atarus Security Team

Mar 180 min read

Contact

info@atarussecurity.com

Legal

Atarus Offensive Security LLC.

© 2026 Atarus Offensive Security LLC. All rights reserved.

Precision Strike-Force Execution

bottom of page