OffSeq | Adversary Tactics for Cyber Resilience

🚨 Your credentials may already be on the dark web. We just launched Breach by OffSeq — our dark web intelligence platform that scans billions of leaked records so you don't have to. 🔍 Domain & email breach search 🌐 Dark web & Telegram monitoring ⚡ Real-time alerts via Slack, email & webhooks 📊 Exportable PDF reports Start with a free scan 👇 breach.offseq.com

🚀 Introducing training.offseq.com — our new cybersecurity & ISO training platform in partnership with @PECB! From ISO 27001 to ethical hacking and GDPR — get certified with globally recognized courses, delivered by offensive security professionals. 🌱 Spring Sale: 15% off all courses through March. 👉 training.offseq.com #Cybersecurity #PECB #InfoSec #ISO27001

🚨 Four CRITICAL flaws found in Gardyn Smart Gardens (Home & Studio) allow remote takeover — no user action needed! Patch ASAP & segment networks. No active exploits yet, but risk is high. radar.offseq.com/threat/critica…...

🚨 CRITICAL: CVE-2026-2251 in Xerox FreeFlow Core (≤8.0.7) allows unauth RCE via path traversal. Upgrade to 8.1.0 ASAP to protect print workflows! 🛡️ radar.offseq.com/threat/cve-202… #OffSeq #Infosec #PrintSecurity

🚨 CRITICAL RCE in OpenStack Vitrage! Authenticated users can execute code on the host (CVE-2026-28370, CVSS 9.1). Patch ASAP or restrict API access. Affects 0, 13.0.0, 14.0.0, 15.0.0. Details: radar.offseq.com/threat/cve-202…...

🚨 CRITICAL: Totolink N300RH routers (v6.1c.1353_B20190305) hit by unauthenticated OS command injection (CVSS 9.3)! Exploit code is public — restrict access & monitor urgently. Patch ASAP when available. radar.offseq.com/threat/cve-202…...

🚨CRITICAL: CVE-2026-27028 in Mobility46.se lets attackers remotely impersonate EV charging stations via unauthenticated WebSocket endpoints. All versions at risk — mitigate by enforcing strong auth now! radar.offseq.com/threat/cve-202…...

🚨 CRITICAL: Copeland XWEB 300D PRO flaw lets attackers bypass authentication & run code remotely — no user action needed! Used in industrial control systems. Patch unavailable — segment & monitor now. radar.offseq.com/threat/cve-202…...

🚨 CRITICAL: CVE-2026-24663 in Copeland XWEB 300D PRO lets unauth'd attackers run remote code via command injection. No patch yet — segment networks & restrict access now! 🛡️ radar.offseq.com/threat/cve-202… #OffSeq #IC...

🚨 CRITICAL: CVE-2026-24731 in EV2GO ev2go.io — all versions affected! Unauthenticated WebSocket access lets attackers control charging stations & corrupt data. Monitor network activity now. radar.offseq.com/threat/cve-202… #OffSe...

🚨 HIGH severity: CVE-2026-27449 in Umbraco Engage.Forms exposes sensitive analytics & customer data via unauthenticated API access. Upgrade to 16.2.1/17.1.1 ASAP! 🔒 radar.offseq.com/threat/cve-202… #OffSeq #Umbraco #Vu...

🚨 Trend Micro patches 8 CRITICAL & high-severity flaws in Apex One for Windows & macOS. No exploits seen yet, but urgent patching is vital to protect endpoints! 🔒 Details: radar.offseq.com/threat/trend-m… #OffSeq #Thre...

🚨 CRITICAL: CVE-2026-27497 impacts n8n-io n8n. Authenticated users can inject code via Merge node, risking full server takeover. Upgrade to 2.10.1/2.9.3/1.123.22 ASAP! 🔒 radar.offseq.com/threat/cve-202… #OffSeq #n8n #C...

🚨 CRITICAL: n8n workflow automation hit by CVE-2026-27577 (CVSS 9.4) — code injection flaw lets authenticated users run system commands! Patch to 2.10.1/2.9.3/1.123.22 ASAP. Lock down permissions! radar.offseq.com/threat/cve-202…...

🚨 CRITICAL code injection alert in n8n-io n8n! Auth users can exploit to gain shell access on vulnerable hosts. Patch to 2.2.0 / 1.123.8 ASAP. Restrict permissions & disable risky nodes! radar.offseq.com/threat/cve-202…...

🚨 CRITICAL: Vitess path traversal flaw (CVE-2026-27969) lets attackers write files to arbitrary locations via backup restore! Affects <22.0.4, 23.0.0 – 23.0.3. Patch now & lock down backup storage. 🔒 radar.offseq.com/threat/cve-202…...

🚨 CRITICAL RCE in langflow-ai langflow (<1.8.0)! Unauthenticated attackers can run arbitrary Python & OS commands via prompt injection. Patch ASAP to avoid full system compromise. radar.offseq.com/threat/cve-202… #OffS...

🚨 CRITICAL: parse-server flaw lets attackers forge Google auth tokens! All versions <8.6.3 & <9.1.1-alpha.4 at risk. Upgrade now or disable Google login. Details: radar.offseq.com/threat/cve-202… #OffSeq #ParseServer #...

🚨 CRITICAL: CVE-2026-27613 in TinyWeb (<2.01) allows unauthenticated OS command injection — RCE risk! Patch to 2.01 or enable STRICT_CGI_PARAMS. Hosting CGI scripts like PHP? Act now! radar.offseq.com/threat/cve-202… #...

🚨 CRITICAL: CVE-2026-27743 in SPIP referer_spam lets unauth'd attackers run SQL via GET requests — no exploit yet, but risk is high. PATCH to 1.3.0+ ASAP to safeguard data! 🔒 radar.offseq.com/threat/cve-202… #OffSeq #S...