Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|6 min read
Active exploitation of TeamCity RCE puts CI/CD control planes on the front line
Read More
vulnerability|7 min read
ChainDrop shows how npm worms are moving from package compromise to CI/CD takeover
Read More
vulnerability|7 min read
TP-Link Omada ZTP flaws expose the trust chain behind managed networks
Read More
vulnerability|5 min read
N-able N-central flaw exposes MSP consoles to account takeover
Read More
vulnerability|6 min read
Hugging Face Diffusers flaws turn model loading into a code execution risk
Read More
vulnerability|5 min read
Adobe Campaign Classic flaws put on-prem marketing systems on the emergency patch list
Read More
vulnerability|7 min read
AWS Kiro flaw shows why AI coding agents need platform-level guardrails
Read More
vulnerability|7 min read
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation
Read More
vulnerability|7 min read
JetBrains TeamCity RCE Puts Self-Hosted CI/CD Servers on an Urgent Patch Clock
Read More
vulnerability|9 min read
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access
Read More
vulnerability|7 min read
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius
Read More
Threat Hunting & Intel|7 min read
Russian Zimbra Campaign Turns Email Preview Into an Exfiltration Path
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon