Research blog

Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.

Featured|Cybercrime|5 min read

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform Product lifecycle management systems are not usually the first asset class defende...

CISA's Latest KEV Additions Put WSO2, Adobe Commerce, SharePoint, and MikroTik on a Short Clock

AI Agents Turn Retail Skimming Into a Low-Cost Cybercrime Operation

EvilTokens disruption gives defenders a short window to clean up device-code phishing risk

North Korea's Contagious Interview campaign turns job tests into malware delivery

Ransomware Tracker

Track active ransomware groups, victim disclosures, and country and sector trends, updated as new leak site activity lands.

Open tracker

vulnerability|7 min read

CVE-2026-87902: WordPress Template RCE Risk

Rust crate owners targeted in video-call supply chain campaign

CISA deadline arrives for exploited Linux kernel AF_ALG race condition

ShinyHunters Breach of Clop Leak Site Shows Ransomware Infrastructure Is a Target Too

Operation RapidRust shows APT36 evolving beyond simple phishing lures

Meduza Stealer Trial: 3 Alleged Creators Face Court

Brevo Supply Chain Attack: 100K Sites Served ClickFix

CVE-2026-76460: Cisco ISE Auth Bypass Zero-Day

Follow the research

New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.

Subscribe via RSS Request assessment