We Went on a SharePoint Expedition, and Here’s What We Found
Of the nearly 30,000 public facing SharePoint portals we found, approximately 3,300 are self-hosted meaning they are vulnerable to the critical CVE-2026-50522.
In The News
Stay updated on cybersecurity news and trends with Raxis. Explore expert analysis, industry updates, and insights to strengthen your security posture.
Raxis at Black Hat USA 2026: Good Conversations & Strong Security
Black Hat 2026 is in the books, and the Raxis team had great conversations with security-minded folks looking for senior-level human hackers and OT experts.
wp2shell: Critical WordPress Unauthenticated to Remote Code Execution Vulnerability
It’s rare for WordPress itself to have CVEs. CVE-2026-63030 and CVE-2026-60137 combine to create the critical unauthenticated to RCE vulnerability wp2shell.
Raxis at Black Hat USA 2026: Come Find Us at Booth 6018
Raxis will be at Black Hat USA 2026 August 4–6 at Mandalay Bay Convention Center in Las Vegas. Find us at booth 6018.
usbliter8 – Apple A12 and A13 SecureROM Exploit
The usbliter8 SecureROM exploit is big news for jailbreaking iPhones. This hardware vulnerability cannot be fixed with a software update.
RoguePlanet: The Defender Zero-day that Survived Microsoft’s June Patch
The new critical Microsoft Defender exploit, RoguePlanet (CVE-2026-50656), is confirmed active in the wild. Learn what it is and how to protect your network.
The Game is Starting: Release the Fraudsters
Large tournaments bring out fraudsters just as your employees’ guard is down. Raxis CTO Brian Tant discusses recent threats and how to protect your company.
CVE-2026-36748: XSS in Rock RMS Leads to Privilege Escalation
Raxis Lead Pentester Jason Taylor recently discovered CVE-2026-36748, a high-risk XSS vulnerability in Rock RMS that allows privilege escalation to admin.
Defense in Depth Against Linux Kernel Privilege Escalation: A Practical Guide for Container Workloads
With current local privilege escalation exploits like Copy Fail and Dirty Frag active in the wild, harden your defenses to halt attacks even before patching.
Critical Buffer Overflow Vulnerability in Palo Alto Networks PAN-OS Software
CVE-2026-0300 is a critical buffer overflow vulnerability in Palo Alto’s PAN-OS software. Discover if you are affected and what to do now.
Copy Fail – Local Linux Privilege Escalation in 4 lines
CVE-2026-31431, dubbed Copy Fail, allows privilege escalation to root on Linux distros missing the latest kernel patches. Learn what to do in this blog.
No Malware Required
The March 2026 attack on Stryker Corporation was not Malware and did not make Ransomware demands. Instead it used compromised credentials to disrupt business.
69 posts in In The News.