Resources

Emerging Threats

Stay on top of the latest emerging threats, their blast radius, available patches, as well as what Risk Ledger can do to help you understand whether one of your suppliers has been breached, and how this might impact your organisation.

Oracle E-Business Suite Vulnerability: Emerging Threat Published on Risk Ledger

Emerging Threat

Oracle E-Business Suite Vulnerability: Emerging Threat Published on Risk Ledger

Oracle has disclosed a critical vulnerability (CVE-2025-61882, CVSS 9.8) affecting Oracle E-Business Suite (EBS) versions 12.2.3 to 12.2.14.

October 7, 2025

ToolShell On-Prem SharePoint Vulnerabilities: Emerging Threat Published on Risk Ledger

Emerging Threat

ToolShell On-Prem SharePoint Vulnerabilities: Emerging Threat Published on Risk Ledger

Microsoft has disclosed two vulnerabilities: CVE-2025-53770 (CVSS 9.8/Critical) and CVE-2025-53771. The exploit method is referred to as a “ToolShell” attack. Find out everything you need to know in this new Risk Ledger Emerging Threats blog.

Chief Operating Officer

Ivanti Connect Secure Zero-Day Exploitation: Emerging Threat published on Risk Ledger

Emerging Threat

Ivanti Connect Secure Zero-Day Exploitation: Emerging Threat published on Risk Ledger

Learn about the latest emerging threat - CVE-2025-0282 and CVE-2025-0283 affecting Ivanti Connect Secure, Policy Secure and ZTA Gateways that were detailed on 8 January 2025.

January 10, 2025

ConnectWise ScreenConnect: Emerging Threat published on Risk Ledger

Emerging Threat

ConnectWise ScreenConnect: Emerging Threat published on Risk Ledger

Learn about the latest emerging threat - ConnectWise's ScreenConnect's vulnerability that was detailed on February 19, 2024.

February 27, 2024

Palo Alto GlobalProtect Vulnerability Detailed by Risk Ledger

Emerging Threat

Palo Alto GlobalProtect Vulnerability Detailed by Risk Ledger

Learn about the latest emerging threat - Palo Alto GlobalProtect vulnerability that was detailed on April 10, 2024.

Briefing Your Board on Supply Chain Attacks Like ToolShell

Emerging Threat

Briefing Your Board on Supply Chain Attacks Like ToolShell

Discover how ToolShell exploits highlight supply chain attacks and what boards must do to assess exposure, brief leadership, and build resilience.

How to Manage Supply Chain Risks in the Fast-Changing World of the Internet of Things (IoT)

Emerging Threat

How to Manage Supply Chain Risks in the Fast-Changing World of the Internet of Things (IoT)

Discover how the rise of IoT technology is exposing organisations to new cyber security and supply chain risks.

October 11, 2024

WS_FTP Server: Emerging Threat published on Risk Ledger

Emerging Threat

WS_FTP Server: Emerging Threat published on Risk Ledger

All versions of Progress Software’s WS_FTP Server are affected by two critical vulnerabilities. This article explains what we know so far.

October 4, 2023

Blast Radius of MOVEit Transfer Attack Widening

Emerging Threat

Blast Radius of MOVEit Transfer Attack Widening

Last week, Risk Ledger published a quick and dirty analysis on the blast radius of the evolving MOVEit Transfer breach.

MOVEit Transfer Vulnerability: Emerging Threat published

Emerging Threat

MOVEit Transfer Vulnerability: Emerging Threat published

A critical SQL injection vulnerability has been identified in Progress Software’s MOVEit Transfer product.

MOVEit & Lack of Supply Chain Visibility

Emerging Threat

MOVEit & Lack of Supply Chain Visibility

The latest Risk Ledger article discusses the recent MOVEit Transfer vulnerability and associated Zellis breach.

Introducing Emerging Threats

Emerging Threat

Introducing Emerging Threats

Today we’re launching a new emerging threats module to help you respond to a live cyber security threat within your supply chain.

August 15, 2022