Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|7 min read
Microsoft Entra ID CVSS 10 RCE is a trust-plane warning
Read More
vulnerability|4 min read
CISA Warns of Active Exploitation in Zimbra Collaboration Suite
Read More
vulnerability|4 min read
CVE-2026-24301: Microsoft Copilot CoSnitch Data Exposure
Read More
vulnerability|7 min read
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide
Read More
Cybercrime|5 min read
Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform
Read More
vulnerability|4 min read
GitLab ships critical GraphQL patch for self-managed instances
Read More
vulnerability|5 min read
macOS Screen Sharing CVE-2026-65400 exploited to gain root and deploy Monero miners
Read More
vulnerability|6 min read
SharePoint JWT Bypass Turns Patch Delay Into an Identity Risk
Read More
vulnerability|6 min read
VMware vCenter RCE exploitation turns syslog exposure into persistence risk
Read More
vulnerability|6 min read
SAP Commerce Cloud CVE-2026-58231 Is a Reminder That Patch Windows Are Now Measured in Days
Read More
vulnerability|6 min read
Metabase zero-day turns BI dashboards into a data-exposure path
Read More
vulnerability|6 min read
Swiss SharePoint breach shows why patching alone may not end the incident
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon