Research blog

Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.

Featured|Cybercrime|5 min read

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform Product lifecycle management systems are not usually the first asset class defende...

WordPress Site Owners Face Mass Exploitation of Super Forms and Elementor Pro Upload Flaws

Dropbox breach shows why third-party identity links need zero trust

CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock

ServiceNow Critical Flaws Expose Enterprise Workflows

Ransomware Tracker

Track active ransomware groups, victim disclosures, and country and sector trends, updated as new leak site activity lands.

Open tracker

vulnerability|6 min read

PaperCut NG/MF zero-day chain: CISA adds actively exploited flaws to KEV

Citrix NetScaler CVE-2026-8452 is now a KEV patch priority

McKesson Cyber Incident Raises Fresh Questions About Healthcare SaaS Exposure

Berlin Refuses Extortion After State Network Cyberattack

cPanel CVE-2026-65643 turns domain parking into a root-control risk

Next.js Critical RCE Fixes Put Self-Hosted Apps on a Short Patch Clock

Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident

CISA Adds Oracle WebLogic Proxy Plug-in Flaw to KEV as Exploitation Pressure Rises

Follow the research

New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.

Subscribe via RSS Request assessment