Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|5 min read
Atlassian Emergency Patches Put Data Center Exposure Back in Focus
Read More
Data Breach|5 min read
ASOS cyber incident: why hijacked customer notifications deserve breach-level response
Read More
vulnerability|6 min read
CVE-2026-104286: FortiMail File Write Zero-Day
Read More
vulnerability|7 min read
CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited
Read More
vulnerability|6 min read
CVE-2026-102489: Zammad Zero-Day Chain Hits Root
Read More
Cybercrime|6 min read
Warlock ransomware is turning old SharePoint exposure into critical infrastructure outages
Read More
Cybercrime|6 min read
Operation KillSwitch Disrupts KillSec, But Victim Follow-Up Still Matters
Read More
vulnerability|6 min read
Cisco SD-WAN Manager zero-day gives attackers admin API access
Read More
vulnerability|7 min read
Apple CoreGraphics zero-day puts older iOS and macOS devices on the urgent patch path
Read More
Threat Hunting & Intel|8 min read
UK education networks face a wave of web-facing attacks
Read More
vulnerability|6 min read
SalesBleed shows how trusted AI agents can become data-exfiltration paths
Read More
Cybercrime|7 min read
AI Agents Turned Retail Skimming Into a Low-Cost Cybercrime Pipeline
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon