Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
Supply Chain Security|6 min read
GitHub GHES Signing Key Rotation Puts Admins on the Clock
Read More
Threat Hunting & Intel|7 min read
AI-Assisted Search Poisoning Fuels ScreenConnect Cryptojacking
Read More
vulnerability|5 min read
CVE-2026-48172 puts LiteSpeed cPanel deployments on a KEV deadline
Read More
vulnerability|5 min read
CVE-2026-9082 makes Drupal on PostgreSQL an urgent KEV patch priority
Read More
vulnerability|7 min read
Microsoft MDASH surfaces 16 Windows network flaws defenders should patch first
Read More
vulnerability|6 min read
CVE-2024-12802 leaves SonicWall Gen6 VPNs exposed after incomplete patching
Read More
Cloud & Application Security|7 min read
CVE-2026-45829: ChromaDB Pre-Auth RCE Risk in AI Stacks
Read More
vulnerability|5 min read
CVE-2026-41615: Microsoft Authenticator Token Theft Risk
Read More
supply chain attack|6 min read
GitHub Action tag hijack turns CI/CD runs into credential theft
Read More
vulnerability|6 min read
CVE-2026-42945 makes NGINX rewrite chains a live patch priority
Read More
Threat Hunting & Intel|5 min read
Kazuar’s redesign turns a familiar backdoor into a harder-to-hunt botnet
Read More
vulnerability|5 min read
CVE-2026-42897 makes on-prem Exchange an immediate mitigation priority
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon