Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|6 min read
CVE-2026-20182 makes Cisco SD-WAN controllers an urgent KEV priority
Read More
vulnerability|5 min read
Exim BDAT flaw makes mail servers urgent RCE patch targets
Read More
Cloud & Application Security|5 min read
LiteLLM SQL injection flaw puts AI gateways on the front line
Read More
vulnerability|5 min read
Dirty Frag Linux kernel zero-day gives local users a fast path to root
Read More
Threat Hunting & Intel|5 min read
TCLBANKER turns WhatsApp and Outlook into trusted malware delivery channels
Read More
vulnerability|5 min read
Dirty Frag Linux kernel zero-day gives local users a fast path to root
Read More
vulnerability|4 min read
CVE-2026-0300 puts exposed PAN-OS User-ID portals on a zero-day attack path
Read More
Threat Hunting & Intel|5 min read
DAEMON Tools supply-chain attack turns trusted installers into a malware delivery path
Read More
Cloud & Application Security|5 min read
Vishing and SSO abuse are accelerating rapid SaaS extortion
Read More
Cloud & Application Security|5 min read
ConsentFix v3 turns Azure OAuth phishing into a scalable token theft risk
Read More
Cybercrime|5 min read
BlackCat case shows ransomware risk inside trusted cyber roles
Read More
Cloud & Application Security|5 min read
PyTorch Lightning supply-chain compromise puts AI developer credentials at risk
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon