Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|5 min read
Gravity SMTP bug turns WordPress email settings into an attacker map
Read More
vulnerability|5 min read
Splunk Enterprise CVE-2026-20253 hits KEV as exploitation begins
Read More
vulnerability|6 min read
Joomla JCE exploitation forces defenders beyond simple patching
Read More
vulnerability|5 min read
Check Point hotfixes actively exploited IKEv1 VPN bypass
Read More
vulnerability|5 min read
Cisco patches another SD-WAN zero-day after limited exploitation
Read More
vulnerability|5 min read
YellowKey fix lands in June baseline: patch BitLocker fleets now
Read More
vulnerability|6 min read
PAN-OS GlobalProtect auth bypass is now an incident response problem
Read More
supply chain attack|6 min read
Red Hat npm compromise proves provenance alone is not enough
Read More
vulnerability|5 min read
Exchange CVE-2026-42897 patches land after active OWA exploitation
Read More
vulnerability|3 min read
Veeam CVE-2026-44963 puts domain-joined backup servers at RCE risk
Read More
Threat Hunting & Intel|7 min read
Oracle PeopleSoft alert follows breach claims at 100+ organizations
Read More
vulnerability|3 min read
Chrome Zero-Day CVE-2026-11645 Enters KEV After Google Ships Emergency V8 Patch
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon