The Coralogix blog

Expert insights, bold ideas, and company news

All Articles

Threat Advisory – ClickHouse CVE-2026-116366: Unauthenticated Remote Code Execution

Threat Advisory – ClickHouse CVE-2026-116366: Unauthenticated Remote Code Execution

Executive Summary On 30 October 2026, ClickHouse disclosed CVE-2026-116366, a critical vulnerability in ClickHouse Server...

12 mins read Read Now
Threat Advisory – Trojanized Claude Code Extension: SSH Backdoor

Threat Advisory – Trojanized Claude Code Extension: SSH Backdoor

Executive Summary A tampered build of the Claude Code editor extension (anthropic.claude-code 2.1.313) was published...

6 mins read Read Now
eMudhra – Coralogix Full Upgrade Guide

eMudhra – Coralogix Full Upgrade Guide

On October 20th, the private keys for 8 intermediate certificate authority (CA) certificates, operated by eMudhra, were compromised. This is an industry-wide issue, so we wish to fully...

15 mins read Read Now
Coralogix Security Advisory: eMudhra Certificate Update

Coralogix Security Advisory: eMudhra Certificate Update

Update from October 23, 2026 What happened? On October 17, 2026, the private keys of...

2 mins read Read Now
Evil Token: AI-Enabled Device Code Phishing Campaign

Evil Token: AI-Enabled Device Code Phishing Campaign

Snowbit by Coralogix – Threat Intelligence Advisory 1. Executive Summary On April 6, 2026, Microsoft Defender Security Research published an advisory detailing a large-scale phishing campaign that leverages...

13 mins read Read Now
MongoBleed (CVE-2025-14847): Critical Unauthenticated MongoDB Memory Disclosure

MongoBleed (CVE-2025-14847): Critical Unauthenticated MongoDB Memory Disclosure

A critical vulnerability identified as CVE-2025-14847 (dubbed “MongoBleed“) affects MongoDB Server instances, exposing systems to...

5 mins read Read Now
Mamona Ransomware (RAAS) – Offline Commodity Ransomware with Custom Encryption

Mamona Ransomware (RAAS) – Offline Commodity Ransomware with Custom Encryption

Summary A newly identified strain of commodity ransomware named Mamona has emerged in the cybercriminal...

4 mins read Read Now
Fortinet Firewall Authentication Bypass Vulnerability (CVE-2024-55591)

Fortinet Firewall Authentication Bypass Vulnerability (CVE-2024-55591)

Summary As per a recent update from Fortinet, Exploitation of CVE-2024-55591, a recently disclosed authentication...

3 mins read Read Now