Mandiant Exploited Dell RecoverPoint for Virtual Machines UNC620110 min read
Latest signal watchTowr Labs PoC public SolarWinds Web Help Desk rce SolarWinds
Feb 17
Security news, decoded.
What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.
Earlier24 stories
Jan 30
watchTowr Labs Exploited Ivanti Endpoint Manager Mobile (EPMM) rce12 min read
Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)
Jan 30
ESET WeLiveSecurity Roundup ServiceNow data-breach2 min read
This month in security with Tony Anscombe – January 2026 edition
Jan 29
Patchstack Patch Quiz and Survey Master (QSM) WordPress plugin web-app5 min read
SQL Injection Vulnerability in Quiz and Survey Master (QSM) Plugin Affecting 40k+ Sites
Jan 22
Patchstack Patch RealHomes CRM plugin web-app6 min read
Critical Arbitrary File Upload Vulnerability in RealHomes CRM Plugin Affecting 30k+ Sites
Jan 22
watchTowr Labs Exploited SmarterMail auth-bypass13 min read
Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass)
Jan 14
Google Project Zero PoC Pixel 9 mobile14 min read
A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?
Jan 14
Google Project Zero PoC Pixel 9 mobile719 min read
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby
Jan 14
Patchstack Exploited Modular DS plugin privilege-escalation10 min read
Critical Privilege Escalation Vulnerability in Modular DS plugin affecting 40k+ Sites exploited in the wild
Jan 8
watchTowr Labs Research SmarterMail rce15 min read
Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691)
Dec 22
ESET WeLiveSecurity Research Windows Imaging Component (WindowsCodecs.dll) rce12 min read
Revisiting CVE‑2025‑50165: A critical flaw in Windows Imaging Component
Dec 17
Patchstack Patch Motors theme web-app5 min read
Critical Arbitrary File Upload Vulnerability in Motors Theme Affecting 20k+ Sites
Dec 10
watchTowr Labs PoC .NET Framework rce31 min read
SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDL
Dec 4
Bishop Fox Research Next Generation Firewall (NGFW) rce7 min read
Arista Firewall XSS to RCE Chain
Nov 14
watchTowr Labs Exploited FortiWeb auth-bypass10 min read
When The Impersonation Function Gets Used To Impersonate Users (Fortinet FortiWeb Auth. Bypass CVE-2025-64446)
Nov 12
watchTowr Labs Research Citrix NetScaler info-disclosure8 min read
Is It CitrixBleed4? Well, No. Is It Good? Also, No. (Citrix NetScaler Memory Leak & RXSS CVE-2025-12101)
Oct 23
ESET WeLiveSecurity Exploited ESET Lazarus25 min read
Gotta fly: Lazarus targets the UAV sector
Jun 26
Bishop Fox Advisory Sitecore Experience Platform rce4 min read
Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3
Jun 25
Mar 21
Bishop Fox Exploited SSL VPN component auth-bypass3 min read
SonicWall-CVE2024-53704: Exploit Details Blog
Mar 18
Bishop Fox PoC Apache Tomcat rce1 min read
Tomcat CVE-2025-24813: What You Need to Know Blog
Feb 10
Bishop Fox PoC SonicOS auth-bypass13 min read
SonicWall CVE-2024-53704: SSL VPN Session Hijacking
Dec 13
Bishop Fox Research SonicOS network-edge18 min read
State of SonicWall Exposure: Firmware Decryption Unlocks New Insights
Nov 1
Bishop Fox Exploited FortiManager rce12 min read