Shadow AI Power Users: The 5% Creating Outsized Enterprise Security Risk
New research from Akamai reveals that a small fraction of enterprise employees—the top 5% of AI power users—are creating a disproportionate security…
Tag: CVE
CVE-2026-65640: WordPress Core Postscript RCE
High-severity WordPress core vulnerability enabling remote code execution via malicious Postscript file upload by Author-level users. Affects versions 4.7 to 7.0. Patched…
CVE-2025-10123: D-Link DIR-823X Command Injection
A command injection vulnerability in D-Link DIR-823X, exploited by Evooo1Bot.
CVE-2025-55583: D-Link DIR-868L Command Injection
A command injection vulnerability in D-Link DIR-868L B1 router, used by Evooo1Bot.
CVE-2022-26134: Atlassian Confluence OGNL Injection
A critical OGNL injection vulnerability in Atlassian Confluence, exploited by Evooo1Bot.
CVE-2022-29464: WSO2 Arbitrary File Upload
An arbitrary file upload vulnerability in WSO2 products, used by Evooo1Bot.
CVE-2022-30525: Zyxel Firewall Command Injection
A command injection vulnerability in Zyxel firewalls, targeted by Evooo1Bot.
CVE-2023-1389: TP-Link Archer AX21 Command Injection
A command injection vulnerability in TP-Link Archer AX21, exploited by Evooo1Bot.
CVE-2024-4577: PHP CGI Argument Injection
A critical argument injection vulnerability in PHP CGI, used by Evooo1Bot.
CVE-2024-10914: D-Link NAS Command Injection
A command injection vulnerability in D-Link NAS devices, included in Evooo1Bot's exploit module.