Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|5 min read
CVE-2026-33032 lets attackers take over exposed nginx-ui servers
Read More
Threat Hunting & Intel|5 min read
Firestarter leaves patched Cisco firewalls at continued risk
Read More
vulnerability|5 min read
Pack2TheRoot flaw puts Linux systems with PackageKit on a local root path
Read More
Supply Chain Security|5 min read
Bitwarden CLI npm compromise exposes CI/CD credential risk
Read More
Cloud & Application Security|2 min read
Lovable Incident Raises Cross-Tenant Data Exposure Concerns for AI Development Platforms
Read More
Cloud & Application Security|4 min read
CVE-2026-5752 turns the Terrarium sandbox into a root-level escape risk
Read More
vulnerability|5 min read
CISA KEV flags Quest KACE SMA auth bypass as a high-priority risk
Read More
vulnerability|5 min read
SGLang CVE-2026-5760 turns malicious GGUF models into RCE
Read More
vulnerability|5 min read
Apache ActiveMQ RCE CVE-2026-34197 Lands in CISA KEV
Read More
vulnerability|5 min read
Critical protobuf.js flaw turns untrusted schemas into JavaScript code execution
Read More
vulnerability|5 min read
Leaked Windows Defender zero-days are already being used to gain SYSTEM access
Read More
Threat Hunting & Intel|5 min read
AgingFly campaign hits Ukrainian government and hospital networks
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon