Broken API authorization is still exposing sensitive data - so we built a free tool to find it.⚡

Available on GitHub, Autoswagger is our free, open‑source tool that finds unauthenticated #APIs leaking sensitive data like credentials or PII.

Learn more: www.intruder.io/research/bro...

#APISecurity

A critical RCE vulnerability in on-prem #Microsoft #SharePoint (CVE-2025-53770) is being actively exploited.

Intruder is the first VM solution we’re aware of to release an active check.

👉 Start a free trial to detect vulnerable SharePoint instances: portal.intruder.io/free_trial

#GladinetCentreStack users - you can now check for CVE-2025-30406 with Intruder ✔️

Our active check is live, so you can find out fast if you're at risk.

👉 Sign up for free to scan your environment today: portal.intruder.io/free_trial

CVE-2025-30406 is a critical (CVSS 9.8) #vulnerability in #GladinetCentreStack.

The issue is caused by the installer using hardcoded values for the validation and decryption key.

Get the latest from our security team: intel.intruder.io/cves/CVE-202...

🚨 Next.js Vulnerability (CVE-2025-29927)
🔴 CVSS: Critical (9.1)
📈 intel.intruder.io hype score: 99 ("it's getting all log4shell")

The advice? Patch now. Get the latest commentary from Intruder’s security team: intel.intruder.io/cves/CVE-202...

Another day, another expiring SSL certificate…

With SSL certificate expirations making headlines, it’s a reminder of how important it is to have a reliable way to track renewals.

Want to see how easy it is with Intruder? Try it for free:
portal.intruder.io/free_trial

We discovered CVE-2025-0589 in Octopus Deploy - a vulnerability that exposes sensitive Active Directory user details.

Our research shows broken authentication issues in APIs are far more common than you’d think, with some bugs going undetected for years.

Read more: www.intruder.io/research/oct...

Ever wished NVD descriptions actually explained the vuln? Meet Intruder’s new AI Summaries—turning often lacking CVE jargon into plain English so you can focus on patching, not parsing.

Check it out👉 intel.intruder.io

#VulnerabilityIntelligence #CVE #CyberSecurity

When PoC exploit code for Mitel MiCollab vulns dropped, Intruder helped a customer reduce exposure within 24hrs:

☁️ Auto-discovered the system via our cloud connector
✅ Deployed a check before our underlying scanners
🚨 Notified the customer so they could fix the issue

Learn more: shorturl.at/lf8wW

Attackers are actively exploiting CVE-2024-50623 to gain remote code execution (RCE) on affected #Cleo servers.

It was initially thought that the patch was insufficient due to ongoing exploitation, but it turns out there is a second unauthenticated RCE.

More info: intel.intruder.io/cves/CVE-202...

Today's hype score: Colder than a datacentre floor ❄️

CVE-2024-42327, a critical vulnerability in #Zabbix, has received the most buzz in the last 24hrs. But with a hype score of 9/100, it's looking like a calm day in the threat landscape so far.

Check it out: intel.intruder.io

#CVE #CyberSecurity

What's the threat landscape like today?

CVE-2024-5921, a high-severity flaw in the #PaloAlto Networks GlobalProtect app, has received the most buzz in the last 24hrs. But with a hype score of 5 / 100, it's pretty quiet out there.

Stay ahead with Intel: intel.intruder.io/trends

#CVE #CyberSecurity