Research blog

Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.

Featured|Cybercrime|5 min read

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform Product lifecycle management systems are not usually the first asset class defende...

Zimbra Exploitation Turns Mail Servers Into Credential Staging Points

Flax Typhoon Tool Seizure Gives Defenders a Fresh Hunting Window

Atlassian Emergency Patches Put Data Center Exposure Back in Focus

ASOS cyber incident: why hijacked customer notifications deserve breach-level response

Ransomware Tracker

Track active ransomware groups, victim disclosures, and country and sector trends, updated as new leak site activity lands.

Open tracker

vulnerability|6 min read

CVE-2026-104286: FortiMail File Write Zero-Day

CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited

CVE-2026-102489: Zammad Zero-Day Chain Hits Root

Warlock ransomware is turning old SharePoint exposure into critical infrastructure outages

Operation KillSwitch Disrupts KillSec, But Victim Follow-Up Still Matters

Cisco SD-WAN Manager zero-day gives attackers admin API access

Apple CoreGraphics zero-day puts older iOS and macOS devices on the urgent patch path

UK education networks face a wave of web-facing attacks

Follow the research

New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.

Subscribe via RSS Request assessment