Research blog
Vulnerability research, threat hunting, cloud and application security, cybercrime, and supply chain risk.
vulnerability|8 min read
Firefox and Chrome fixes turn browser patching into this week's urgent control
Read More
vulnerability|7 min read
Exploited SonicWall SMA zero-days put remote access gateways on the clock
Read More
vulnerability|9 min read
Exploited Joomla extension flaws turn file uploads into emergency patch work
Read More
vulnerability|8 min read
BeyondTrust auth bypass flaws put remote support appliances on the urgent patch list
Read More
vulnerability|7 min read
Gitea Docker flaw turns a trusted proxy header into account takeover
Read More
vulnerability|8 min read
U-Boot FIT signature flaws expose a fragile pre-OS trust boundary
Read More
vulnerability|7 min read
Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path
Read More
vulnerability|8 min read
Unpatched Tenda router backdoor turns home gateways into a trust problem
Read More
vulnerability|7 min read
CISA's July KEV batch puts Joomla page builders and Langflow on emergency patch lists
Read More
vulnerability|6 min read
Adobe ColdFusion CVE-2026-48282 moves from patch advisory to active exploitation
Read More
Cybercrime|7 min read
Vect and TeamPCP show how stolen build secrets become ransomware access
Read More
Cybercrime|6 min read
JADEPUFFER shows how agentic AI can turn exposed Langflow into ransomware
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
- AOMEI Backupper Supply-Chain Attack: Hunt the Five-Minute Update Windows
- ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
- ConnectWise Cloud Backup: Microsoft 365 Access Incident
- PAYLOAD Ransomware Turns Active Directory Group Policy Into a Domain-Wide Weapon