Vulnerability Research
Patch Now: Android RCE, cPanel Auth Bypass, MOVEit, Copy Fail LPE, and Weaver E-cology — May 2026
Emergency patch advisory covering 5 critical vulnerabilities requiring immediate patching across enterprise servers.
Threat Intel
Threat Intel
CISA CI Fortify: Planning for Cyber Emergencies When Connectivity Itself Is the Target
Analyzing CISA's CI Fortify initiative: preparing critical infrastructure organizations for total telecommunication and internet severance.
Data Breach
Instructure Canvas Breach: 275 Million Students' Data Stolen, Linked to TeamPCP Campaign
How threat actors exfiltrated 275 million user records from Instructure Canvas in one of the largest educational data breaches in history.
Security Roundup
Security Roundup: Bleeding Llama, GitHub RCE, 275M Student Records Stolen — Week of May 7, 2026
Weekly briefing: Bleeding Llama Ollama memory leak, GitHub single-push RCE, 275M Canvas student records breach, and CISA CI Fortify.
Supply Chain
Software Supply Chain Under Siege: The TeamPCP Campaign from Trivy to Bitwarden
Comprehensive forensic investigation into TeamPCP's multi-stage campaign compromising Trivy, LiteLLM, Bitwarden CLI, and npm registries.