Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|5 min read
Leaked Windows Defender zero-days are already being used to gain SYSTEM access
Read More
Threat Hunting & Intel|5 min read
AgingFly campaign hits Ukrainian government and hospital networks
Read More
vulnerability|2 min read
CVE-2026-33032 in nginx-ui Enables Full Nginx Server Takeover via Unauthenticated MCP Access
Read More
Cloud & Application Security|5 min read
Malicious Chrome extensions turn OAuth tokens into enterprise risk
Read More
vulnerability|4 min read
CVE-2026-5194 weakens wolfSSL certificate trust in embedded deployments
Read More
vulnerability|3 min read
Docker AuthZ Plugin Bypass in CVE-2026-34040 Weakens API-Level Container Controls
Read More
Threat Hunting & Intel|5 min read
CPUID breach turned CPU-Z and HWMonitor into a malware delivery path
Read More
Cloud & Application Security|4 min read
CVE-2026-39987 puts exposed Marimo notebooks on a fast credential-theft path
Read More
vulnerability|5 min read
CVE-2026-22557 puts internet-exposed UniFi controllers at account-takeover risk
Read More
Threat Hunting & Intel|7 min read
Iranian PLC Attacks Disrupt U.S. Critical Infrastructure
Read More
Data Breach|5 min read
Snowflake customer breaches show how stolen SaaS tokens can spread one integrator compromise
Read More
vulnerability|5 min read
CVE-2026-34040 puts Docker image-mount trust on the host-root risk path
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon