en
Executive weekly threat intelligence briefing: PaperCut print server zero-day RCE, CISA 72-hour Oracle WebLogic mandate, Citrix NetScaler KEV addition, and Halliburton energy outages.
en
A forensic investigation has unmasked the operator behind TeamPCP and the Shai-Hulud supply chain worms as Ruben Thomson of Perth, Australia. Here is the full breakdown of the OPSEC blunders, C2 infrastructure, and transitive build-pipeline attacks.
en
Executive threat briefing on Keycloak's account takeover flaw, actively exploited Zimbra SNMP RCE, Operation QUICSILVER espionage, and ransomware waves.
en
Analysis of the weekend ransomware wave by Helix and Qilin hitting energy tester AmSpec and industrial contractors, highlighting rapid 24-hour vulnerability weaponization.
en
Analysis of Operation QUICSILVER, an advanced cyber espionage campaign deploying custom Go backdoors communicating over encrypted QUIC protocol tunnels.
en
Technical breakdown of CVE-2026-18963, a CVSS 9.1 authentication bypass in Keycloak allowing unauthenticated account takeover via forced password reset.
en
Executive threat intelligence briefing covering Entra ID's CVSS 10.0 RCE, VMware vCenter Syslog traversal, TrueConf supply chain poisoning, and Windows IKE double-free.
en
Deep dive into CVE-2026-72529 and CVE-2026-72530 in TrueConf Server, exploited by Head Mare for SYSTEM takeover and supply chain poisoning.
en
Technical analysis of CVE-2026-69836, a CVSS 10.0 deserialization flaw in Microsoft Entra ID actively targeted in cloud identity infrastructure.
en
Weekend security briefing covering GeoServer's unauthenticated SQLi zero-day, the Defender ShieldBreak LPE bypass, Microsoft QUIC CVSS 9.8 RCE, and global breach waves.
en
Analysis of the Clop extortion wave and recent healthcare data breaches at Baylor Genetics and Poland's MyDr platform.
en
Technical breakdown of CVE-2026-63520 and how threat actors chain SharePoint input validation bugs to achieve pre-auth remote code execution.