Research blog

Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.

Featured|Cybercrime|5 min read

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform

Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform Product lifecycle management systems are not usually the first asset class defende...

Microsoft Fixes Exploited Windows Shell Zero-Day Behind Mark-of-the-Web Bypass

Another Critical NetScaler Flaw Keeps Edge Risk in the Spotlight

China-Linked Operators Turn Edge Devices Into a Data-Theft Workbench

China-Linked Operators Blend Botnets, Phishing, and Hands-On Intrusions

Ransomware Tracker

Track active ransomware groups, victim disclosures, and country and sector trends, updated as new leak site activity lands.

Open tracker

Threat Hunting & Intel|4 min read

Zimbra Exploitation Turns Mail Servers Into Credential Staging Points

Flax Typhoon Tool Seizure Gives Defenders a Fresh Hunting Window

Atlassian Emergency Patches Put Data Center Exposure Back in Focus

ASOS cyber incident: why hijacked customer notifications deserve breach-level response

CVE-2026-104286: FortiMail File Write Zero-Day

CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited

CVE-2026-102489: Zammad Zero-Day Chain Hits Root

Warlock ransomware is turning old SharePoint exposure into critical infrastructure outages

Follow the research

New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.

Subscribe via RSS Request assessment