@intruder-io.bsky.social
Use Intruder for real-time discovery and prioritization of attack surface weaknesses. Focus on the fixes that matter. https://www.intruder.io/
Meet GregAI - your new #AI security analyst copilot. 🤖
With knowledge of your entire Intruder account, he helps you validate and prioritize issues, remediate with confidence, create clear stakeholder updates, and more.
Learn more: www.intruder.io/blog/greg-ai...
Broken API authorization is still exposing sensitive data - so we built a free tool to find it.⚡
Available on GitHub, Autoswagger is our free, open‑source tool that finds unauthenticated #APIs leaking sensitive data like credentials or PII.
Learn more: www.intruder.io/research/bro...
#APISecurity
Autoswagger: Open-source tool to expose hidden API authorization flaws
📖 Read more: www.helpnetsecurity.com/2025/07/24/a...
#cybersecurity #cybersecuritynews #opensource #APIsecurity @intruder-io.bsky.social
A critical RCE vulnerability in on-prem #Microsoft #SharePoint (CVE-2025-53770) is being actively exploited.
Intruder is the first VM solution we’re aware of to release an active check.
👉 Start a free trial to detect vulnerable SharePoint instances: portal.intruder.io/free_trial
🚨 CVE-2025-53770 is critical RCE in on-prem #MicrosoftSharePoint that is being actively exploited.
Get our latest guidance: cvemon.intruder.io/cves/CVE-202...
#GladinetCentreStack users - you can now check for CVE-2025-30406 with Intruder ✔️
Our active check is live, so you can find out fast if you're at risk.
👉 Sign up for free to scan your environment today: portal.intruder.io/free_trial
CVE-2025-30406 is a critical (CVSS 9.8) #vulnerability in #GladinetCentreStack.
The issue is caused by the installer using hardcoded values for the validation and decryption key.
Get the latest from our security team: intel.intruder.io/cves/CVE-202...
🚨 Next.js Vulnerability (CVE-2025-29927)
🔴 CVSS: Critical (9.1)
📈 intel.intruder.io hype score: 99 ("it's getting all log4shell")
The advice? Patch now. Get the latest commentary from Intruder’s security team: intel.intruder.io/cves/CVE-202...
Another day, another expiring SSL certificate…
With SSL certificate expirations making headlines, it’s a reminder of how important it is to have a reliable way to track renewals.
Want to see how easy it is with Intruder? Try it for free:
portal.intruder.io/free_trial
We discovered CVE-2025-0589 in Octopus Deploy - a vulnerability that exposes sensitive Active Directory user details.
Our research shows broken authentication issues in APIs are far more common than you’d think, with some bugs going undetected for years.
Read more: www.intruder.io/research/oct...
☁️ Cloud security is coming soon to Intruder...
But how will this compare to #AWS security services like GuardDuty, Inspector, and Config?
Learn more and signup to be the first to know when cloud security launches: www.intruder.io/blog/aws-sec...
Most bug hunters skip or under-test SAML flows, but that’s exactly where Cale Anderson, Intruder Security Engineer, found a serious security issue in #Oracle Commerce Cloud 👀
Read the full breakdown:
intruder.io/research/sim...
🚨 CVE-2025-0108 is a high-severity (CVSS 8.8) vulnerability affecting Palo Alto Networks’ PAN-OS, allowing attackers to bypass authentication and execute certain PHP scripts.
👉 See our latest analysis on Intel: hubs.li/Q036zXVf0
Ever wished NVD descriptions actually explained the vuln? Meet Intruder’s new AI Summaries—turning often lacking CVE jargon into plain English so you can focus on patching, not parsing.
Check it out👉 intel.intruder.io
#VulnerabilityIntelligence #CVE #CyberSecurity
More details are emerging on #CVE-2024-55591 today - our customers are already ahead of the curve 🚀
We quickly assessed the threat and developed an active check - before one was available from our underlying scanners.
Stay ahead of the latest developments: intel.intruder.io/cves/CVE-202...
#CVE-2024-55591 is a critical vulnerability in FortiOS and FortiProxy under active exploitation. 🚨
The #vulnerability allows unauthenticated attackers to create administrative accounts. #Fortinet has released IoCs to help identify suspicious activity.
intel.intruder.io/cves/CVE-202...
CVE-2025-0282 is a critical buffer overflow vulnerability in #Ivanti Connect Secure.
We recommend prioritizing it over other criticals, but due to its complexity, don't expect widespread exploitation.
Get the latest from our Security Team: intel.intruder.io/cves/CVE-202...
#CyberSecurity #InfoSec
SafeBreach released a writeup on Jan 1st linking CVE-2024-49112 to a DoS exploit. However, the original researcher who reported the bug to Microsoft disagrees.
Find out more: intel.intruder.io/cves/CVE-202...
#CyberSecurity #CVE202449112 #InfoSec #Microsoft
When PoC exploit code for Mitel MiCollab vulns dropped, Intruder helped a customer reduce exposure within 24hrs:
☁️ Auto-discovered the system via our cloud connector
✅ Deployed a check before our underlying scanners
🚨 Notified the customer so they could fix the issue
Learn more: shorturl.at/lf8wW
CVE-2024-50623 - Cleo remote code execution - second unauthenticated RCE
Attackers are actively exploiting CVE-2024-50623 to gain remote code execution (RCE) on affected #Cleo servers.
It was initially thought that the patch was insufficient due to ongoing exploitation, but it turns out there is a second unauthenticated RCE.
More info: intel.intruder.io/cves/CVE-202...
Hypemeter gauge displaying a score of 9 out of 100, with the caption 'Colder than a datacentre floor.' The gauge transitions from gray (low scores) to red (high scores).
Today's hype score: Colder than a datacentre floor ❄️
CVE-2024-42327, a critical vulnerability in #Zabbix, has received the most buzz in the last 24hrs. But with a hype score of 9/100, it's looking like a calm day in the threat landscape so far.
Check it out: intel.intruder.io
#CVE #CyberSecurity
Intel's Hypemeter - 5 out of 100
What's the threat landscape like today?
CVE-2024-5921, a high-severity flaw in the #PaloAlto Networks GlobalProtect app, has received the most buzz in the last 24hrs. But with a hype score of 5 / 100, it's pretty quiet out there.
Stay ahead with Intel: intel.intruder.io/trends
#CVE #CyberSecurity
