Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|5 min read
Cisco CUCM SSRF bug turns WebDialer exposure into a path toward root
Read More
Cloud & Application Security|5 min read
CVE-2026-45247: Mirasvit Cache Warmer RCE Threatens Magento Stores
Read More
vulnerability|6 min read
Cisco SD-WAN zero-day turns earlier auth bypass flaws into root access risk
Read More
supply chain attack|6 min read
GitHub breach forces GHES signing-key rotation
Read More
vulnerability|7 min read
One-Click github.dev Attack Lets Malicious Repos Steal Full GitHub Tokens
Read More
vulnerability|7 min read
FlagLeft Turns Microsoft 365 Android Apps Into a Silent Account Takeover Path
Read More
Threat Hunting & Intel|7 min read
LLMShare Turns Trusted AI Domains Into Malware Delivery Infrastructure
Read More
vulnerability|5 min read
Drupal PostgreSQL SQLi shows how SELECT-only injection becomes RCE
Read More
vulnerability|5 min read
Unfixed Gogs flaw can turn pull requests into server-side RCE
Read More
vulnerability|5 min read
Palo Alto GlobalProtect auth bypass turns cookie trust into VPN access risk
Read More
vulnerability|5 min read
FortiClient EMS exploit turns endpoint management into credential theft at scale
Read More
Threat Hunting & Intel|6 min read
GlassWorm takedown shows how developer malware becomes supply-chain risk
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon