Research blog

Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.

Featured|Cybercrime|5 min read

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform Product lifecycle management systems are not usually the first asset class defende...

NIKKE PC Launcher Compromise Turns a Trusted Update Path into a Malware Delivery Channel

XCPE Backdoor Turns Android TV Boxes into a Supply-Chain Botnet

NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028

Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active

Ransomware Tracker

Track active ransomware groups, victim disclosures, and country and sector trends, updated as new leak site activity lands.

Open tracker

vulnerability|2 min read

GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue

NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface

GMO Onamae Cloud Breach: When a Hosted Desktop Becomes a Trading-Risk Control Plane

Veeam Backup Servers Face a Critical Unauthenticated Authorization Bypass

Microsoft 365 Token Replay Campaign Hit 79 Organizations Without Defeating MFA

UNM Health Cyber Incident Shows How Quickly Hospital Operations Can Unravel

Redis RESTORE Flaw Is Now Exploited: Patch CVE-2026-25243 and Restrict the Command

Capcom ID Breach Exposes 11.7 Million Records: The Phishing Risk Comes Next

Follow the research

New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.

Subscribe via RSS Request assessment