Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
Cloud & Application Security|6 min read
MaliciousCorgi: VSCode Supply Chain Attack on 1.5M Devs | 2026
Read More
Ransomware Groups|11 min read
Mandiant Findings ShinyHunters Voice Phishing: SaaS Extortion Research
Read More
Cloud & Application Security|14 min read
SolarWinds warns of critical Web Help Desk RCE, auth bypass flaws
Read More
Threat Hunting & Intel|3 min read
CVE-2025-8088: The WinRAR Path Traversal Flaw Powering Global Cyberattacks—From Russian Spies to Ransomware Gangs
Read More
vulnerability|2 min read
IBM API Connect Authentication Bypass Vulnerability
Read More
Infostealer|8 min read
Katz Stealer
Read More
vulnerability|6 min read
Cybersecurity Advisory – WinRAR Zero-Day Exploit by 'RomCom' Hacking Group
Read More
Threat Hunting & Intel|4 min read
Iran-Linked Android Spyware Masquerading as VPN and Starlink Apps
Read More
Cybercrime|4 min read
NASCAR Confirms Major Data Breach After March 2025 Cyberattack
Read More
Cybercrime|7 min read
Operation Checkmate: BlackSuit Extortion Sites Seized
Read More
Infostealer|8 min read
Katz Stealer: The Rise of a Next-Gen Infostealer MaaS
Read More
Cloud & Application Security|4 min read
The July 2025 Zero-Day Storm: SharePoint and CrushFTP Under Active Attack
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- Microsoft Fixes Exploited Windows Shell Zero-Day Behind Mark-of-the-Web Bypass
- Another Critical NetScaler Flaw Keeps Edge Risk in the Spotlight
- China-Linked Operators Turn Edge Devices Into a Data-Theft Workbench
- China-Linked Operators Blend Botnets, Phishing, and Hands-On Intrusions
- Zimbra Exploitation Turns Mail Servers Into Credential Staging Points