Field Effect delivers intelligence-grade managed detection and response for the AI era. See for yourself: fieldeffect.com/get-a-demo
Joined April 2016
- Tweets 1,394
- Following 396
- Followers 1,303
- Likes 767
270 Photos and videos
May 28
A recently disclosed Apache Tomcat vulnerability, CVE-2026-34486, exposes clustered deployments to remote code execution under specific conditions.
1
3
154
May 28
Public proof-of-concept exploit code demonstrates practical exploitation through the Tomcat Tribes communication channel, increasing risk where clustering is enabled and network exposure exists.
1
175
May 28
Applying vendor patches and reviewing clustering configurations reduces exposure and removes the underlying vulnerability. More: fieldeffect.com/blog/public-…
33
Mar 10
More than 80% of incidents our team investigated last year stemmed from cloud identity compromise, highlighting a growing shift in how adversaries are gaining access to corporate environments. Get more cybersecurity data, trends, and analysis here: get.fieldeffect.com/2026-cyb…
62
Escalating conflict following coordinated U.S. and Israeli strikes on Iranian military and nuclear sites has raised concerns about potential cyber spillover.
1
2
103
Researchers have observed a rise in opportunistic hacktivist activity and unverified claims of DDoS attacks, defacements, and data leaks targeting Iran’s adversaries.
1
1
88
Organizations are advised to remain vigilant and reinforce core security controls. More detail here: fieldeffect.com/blog/cyber-s…
1
73
5 Dec 2025
🚨 AWS reports groups are actively exploiting the #React2Shell RCE in the wild. Attackers are using exposed RSC endpoints for unauthenticated RCE → webshells → cloud pivoting. Patch React/Next.js immediately. No Field Effect systems are affected.
More: fieldeffect.com/blog/react-s…
166
26 Nov 2025
Researchers found the Recent Links feature on online code-formatters leaks private snippets via predictable URLs, exposing API keys, DB creds, & tokens at scale. More details here: fieldeffect.com/blog/recent-…
1
124
23 Oct 2025
From our security experts 👇
A high-severity RCE vulnerability (CVE-2025-62518) impacts Rust-based archive libraries like async-tar, used across cloud-native & containerized systems.
Multiple patches avail, check our writeup for full mitigation details: fieldeffect.com/blog/tarmage…
138
9 Oct 2025
An exec-targeted extortion campaign is claiming theft of Oracle EBS data. Since then, a critical flaw in Oracle EBS (CVE-2025-61882) has been confirmed.
1
163
9 Oct 2025
If you run #Oracle #EBS (v12.2.3-12.2.14) or have internet-exposed modules:
- Patch immediately
- Lock down/reset access paths
- Hunt for IoCs (reverse shells, HTTP anomalies, unusual outbound activity)
Full breakdown: fieldeffect.com/blog/oracle-…
117
26 Sep 2025
What started as a potentially unwanted application (PUA) flagged as malicious by Microsoft Defender led our analysts to uncover a broader malware campaign using trojanized apps, signed binaries, and deceptive 7-Zip packaging.
Read the full breakdown: fieldeffect.com/blog/potenti…
1
115
24 Sep 2025
🚨 New patch alert: SolarWinds has released a hotfix for CVE-2025-26399, a critical Web Help Desk flaw enabling RCE. The company urged customers yesterday to upgrade to Web Help Desk version 12.8.7 Hotfix 1 to mitigate the issue. Details: fieldeffect.com/blog/patch-s…
115
9 Sep 2025
Field Effect is actively monitoring a supply chain attack involving hijacked npm packages. Researchers say hackers planted malicious code in open source software packages with 2B weekly updates. None of Field Effect's services are affected and our internal review confirms...
1
1
84
9 Sep 2025
...no exposure to the compromised components. Field Effect's onboarding process for 3rd-party libraries includes validation steps that would've identified affected packages & updates are performed only after a review of their current security posture.
1
55
9 Sep 2025
More info from our analysts on the #npm supply chain attack here: fieldeffect.com/blog/npm-sup…
67
28 Aug 2025
Ongoing attacks against Sangoma #FreePBX systems (since Aug 21) exploit publicly exposed Admin Control Panels.
🔹 Affected: v16 & v17 w/ Endpoint Manager installed
🔹 Fix: EDGE module update (temp fix)
🔹 Restrict ACP to trusted IPs or VPN
Details: fieldeffect.com/blog/sangoma…
1
307
27 Aug 2025
Citrix has patched 3 #NetScaler flaws—including a zero-day (CVE-2025-7775, CVSS 9.2) exploited in the wild.
❗ Affects VPN, AAA, & mgmt interfaces
❗ No workarounds—patch now
✅ Cloud services already updated
Details: fieldeffect.com/blog/citrix-…
#POC #exploit #vulnerability
689