en
GeoServer's jsonArrayContains Unauthenticated SQL Injection and RCE Zero-Day
Technical breakdown of the actively exploited jsonArrayContains SQL injection zero-day in GeoServer leading to PostGIS/Oracle database compromise and RCE.
en
en
Inside ojo: How ColibriSec’s Scanner Finds Vulnerabilities, Secrets, and Misconfigurations
Under the hood of ojo's zero-dependency engine: manifest parsing, Tree-sitter SAST queries, OS package diffing, and offline vulnerability databases.
en
Introducing ojo: ColibriSec's Open Source Security Scanner
Introducing ojo: a single static binary for vulnerability scanning, secret detection, SAST, and IaC misconfiguration checks with zero external dependencies.
en
Swiss BIT Breach: What Happened to the Federal IT Agency's SharePoint Servers
An investigation into how threat actors exploited on-premises SharePoint patch latency to compromise 200 Swiss federal government IT accounts.
en
CVE-2026-8037: Progress Kemp LoadMaster's Pre-Authentication Root Command Injection
Technical root cause and active scanning telemetry for the CVSS 9.6 pre-auth root command injection in Progress Kemp LoadMaster appliances.
en
CVE-2026-20349: Cisco ASA and FTD's Actively Exploited VPN Denial-of-Service Flaw
Technical breakdown of the actively exploited remote unauthenticated VPN denial-of-service vulnerability in Cisco ASA and FTD firewalls.
en
CVE-2026-72898: Metabase's Unauthenticated SQL Injection Zero-Day
Technical root cause and remediation for the unauthenticated CVSS 10.0 SQL injection in Metabase password reset endpoint exploited as a zero-day.
en
CVE-2026-68820: Microsoft Windows AFD.sys Zero-Day Exploited by Lazarus
How Lazarus Group weaponized a Windows afd.sys kernel zero-day for 5 weeks in Operation Dream Job to bypass EDR defenses.
en
Security Roundup: Lazarus's Windows Zero-Day, a Critical Metabase SQL Injection, and a Swiss Government SharePoint Breach (Week of August 10, 2026)
Weekly threat intelligence briefing: Lazarus 5-week Windows zero-day, Metabase CVSS 10.0 unauth SQL injection, Cisco firewall crashes, and Swiss BIT breach.
en
Liechtenstein Breach: What Happened to the Beneficial-Ownership Register Hackers Accessed
How attackers breached Liechtenstein's beneficial-ownership register, exposing 31,000 corporate and trust entity records.
en
CVE-2026-20253: Splunk Enterprise's Unauthenticated Arbitrary File Write Flaw
Technical breakdown of the unauthenticated PostgreSQL sidecar file write/truncation flaw in Splunk Enterprise.
en
CVE-2026-50751: Check Point VPN Zero-Day Exploited by Qilin Ransomware
How Qilin ransomware operators exploited a Check Point VPN zero-day to gain initial network access.