Imran Pasha

All posts by Imran Pasha

Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Critical authentication bypass in ruby-saml

Cybersecurity Threat Advisory: Critical authentication bypass in ruby-saml

CVE-2025-25292 and CVE-2025-25291 are related to an authentication bypass vulnerability found in ruby-saml due to parser differential handling. The flaws carry a high CVSS score of 8.8. The vulnerability exists in the way ReXML and Nokogiri parse XML differently. The...

/ March 17, 2025
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: End-of-Life Microsoft Exchange servers exposed

Cybersecurity Threat Advisory: End-of-Life Microsoft Exchange servers exposed

In this Cybersecurity Threat Advisory, we look at how over 20,000 Microsoft (MS) Exchange email servers across Europe, the U.S., and Asia are at risk of cyberattacks due to running on unsupported software versions. These servers are susceptible to numerous...

/ December 5, 2023