Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
Data Breach|6 min read
Dropbox breach shows why third-party identity links need zero trust
Read More
vulnerability|7 min read
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock
Read More
vulnerability|4 min read
ServiceNow Critical Flaws Expose Enterprise Workflows
Read More
vulnerability|6 min read
PaperCut NG/MF zero-day chain: CISA adds actively exploited flaws to KEV
Read More
vulnerability|7 min read
Citrix NetScaler CVE-2026-8452 is now a KEV patch priority
Read More
Data Breach|5 min read
McKesson Cyber Incident Raises Fresh Questions About Healthcare SaaS Exposure
Read More
Cybercrime|5 min read
Berlin Refuses Extortion After State Network Cyberattack
Read More
vulnerability|7 min read
cPanel CVE-2026-65643 turns domain parking into a root-control risk
Read More
vulnerability|5 min read
Next.js Critical RCE Fixes Put Self-Hosted Apps on a Short Patch Clock
Read More
vulnerability|6 min read
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident
Read More
vulnerability|4 min read
CISA Adds Oracle WebLogic Proxy Plug-in Flaw to KEV as Exploitation Pressure Rises
Read More
Threat Hunting & Intel|4 min read
TrueConf KEV Flaws: When a Video Server Becomes a Malware Distribution Point
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon