en
Executive threat intelligence briefing covering Entra ID's CVSS 10.0 RCE, VMware vCenter Syslog traversal, TrueConf supply chain poisoning, and Windows IKE double-free.
en
A critical GitLab flaw exploited within 48 hours of disclosure, an authentication bypass under sustained attack against N-able N-central RMM servers, and a third-party fulfillment breach exposing thousands of hardware wallet buyers headline this week's briefing — alongside a WordPress plugin flaw threatening 300,000 sites and an AI
en
A SQL injection zero-day at fulfillment partner ShipMonk exposed order data for nearly 14,000 Trezor hardware wallet customers.
en
Weekend security briefing covering GeoServer's unauthenticated SQLi zero-day, the Defender ShieldBreak LPE bypass, Microsoft QUIC CVSS 9.8 RCE, and global breach waves.
en
Analysis of the Clop extortion wave and recent healthcare data breaches at Baylor Genetics and Poland's MyDr platform.
en
How the ShieldBreak exploit chain bypasses Defender's RoguePlanet fix to achieve local privilege escalation to SYSTEM.
en
Technical breakdown of the actively exploited jsonArrayContains SQL injection zero-day in GeoServer leading to PostGIS/Oracle database compromise and RCE.
en
An investigation into how threat actors exploited on-premises SharePoint patch latency to compromise 200 Swiss federal government IT accounts.
en
Technical root cause and active scanning telemetry for the CVSS 9.6 pre-auth root command injection in Progress Kemp LoadMaster appliances.
en
Technical breakdown of the actively exploited remote unauthenticated VPN denial-of-service vulnerability in Cisco ASA and FTD firewalls.
en
Technical root cause and remediation for the unauthenticated CVSS 10.0 SQL injection in Metabase password reset endpoint exploited as a zero-day.
en
How Lazarus Group weaponized a Windows afd.sys kernel zero-day for 5 weeks in Operation Dream Job to bypass EDR defenses.