Mandiant Exploited iOS UNC674832 min read
Latest signal watchTowr Labs PoC public FootPrints web-app BMC
Mar 18
Security news, decoded.
What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.
Earlier34 stories
Mar 16
Mandiant Research ransomware58 min read
Ransomware Tactics, Techniques, and Procedures in a Shifting Threat Landscape
Mar 10
ESET WeLiveSecurity Exploited BeardShell Sednit (APT28)21 min read
Sednit reloaded: Back in the trenches
Mar 9
Bishop Fox Exploited FortiClient EMS network-edge17 min read
Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643
Mar 6
GitHub Security Lab Research GitHub Security Lab Taskflow Agent ai-ml30 min read
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
Mar 5
Mandiant Exploited GTIG zero-day tracking UNC522131 min read
Look What You Made Us Patch: 2025 Zero-Days in Review
Mar 3
watchTowr Labs Patch Junos OS Evolved (PTX Series) rce12 min read
Sometimes, You Can Just Feel The Security In The Design (Juniper Junos Evolved CVE-2026-21902 Pre-Auth RCE)
Mar 3
Mandiant Exploited iOS exploit kit Coruna UNC635318 min read
Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit
Feb 26
Google Project Zero PoC Windows privilege-escalation17 min read
A Deep Dive into the GetProcessHandleFromHwnd API
Feb 25
watchTowr Labs PoC SolarWinds Web Help Desk rce37 min read
Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Chain(s))
Feb 17
Mandiant Exploited Dell RecoverPoint for Virtual Machines UNC620110 min read
UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Day
Jan 30
watchTowr Labs Exploited Ivanti Endpoint Manager Mobile (EPMM) rce12 min read
Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)
Jan 30
ESET WeLiveSecurity Roundup ServiceNow data-breach2 min read
This month in security with Tony Anscombe – January 2026 edition
Jan 29
Patchstack Patch Quiz and Survey Master (QSM) WordPress plugin web-app5 min read
SQL Injection Vulnerability in Quiz and Survey Master (QSM) Plugin Affecting 40k+ Sites
Jan 22
Patchstack Patch RealHomes CRM plugin web-app6 min read
Critical Arbitrary File Upload Vulnerability in RealHomes CRM Plugin Affecting 30k+ Sites
Jan 22
watchTowr Labs Exploited SmarterMail auth-bypass13 min read
Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass)
Jan 14
Google Project Zero PoC Pixel 9 mobile14 min read
A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?
Jan 14
Google Project Zero PoC Pixel 9 mobile719 min read
A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby
Jan 14
Patchstack Exploited Modular DS plugin privilege-escalation10 min read
Critical Privilege Escalation Vulnerability in Modular DS plugin affecting 40k+ Sites exploited in the wild
Jan 8
watchTowr Labs Research SmarterMail rce15 min read
Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691)
Dec 22
ESET WeLiveSecurity Research Windows Imaging Component (WindowsCodecs.dll) rce12 min read
Revisiting CVE‑2025‑50165: A critical flaw in Windows Imaging Component
Dec 17
Patchstack Patch Motors theme web-app5 min read
Critical Arbitrary File Upload Vulnerability in Motors Theme Affecting 20k+ Sites
Dec 10
watchTowr Labs PoC .NET Framework rce31 min read
SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDL
Dec 4
Bishop Fox Research Next Generation Firewall (NGFW) rce7 min read
Arista Firewall XSS to RCE Chain
Nov 14
watchTowr Labs Exploited FortiWeb auth-bypass10 min read
When The Impersonation Function Gets Used To Impersonate Users (Fortinet FortiWeb Auth. Bypass CVE-2025-64446)
Nov 12
watchTowr Labs Research Citrix NetScaler info-disclosure8 min read
Is It CitrixBleed4? Well, No. Is It Good? Also, No. (Citrix NetScaler Memory Leak & RXSS CVE-2025-12101)
Oct 23
ESET WeLiveSecurity Exploited ESET Lazarus25 min read
Gotta fly: Lazarus targets the UAV sector
Jun 26
Bishop Fox Advisory Sitecore Experience Platform rce4 min read
Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3
Jun 25
Mar 21
Bishop Fox Exploited SSL VPN component auth-bypass3 min read
SonicWall-CVE2024-53704: Exploit Details Blog
Mar 18
Bishop Fox PoC Apache Tomcat rce1 min read
Tomcat CVE-2025-24813: What You Need to Know Blog
Feb 10
Bishop Fox PoC SonicOS auth-bypass13 min read
SonicWall CVE-2024-53704: SSL VPN Session Hijacking
Dec 13
Bishop Fox Research SonicOS network-edge18 min read
State of SonicWall Exposure: Firmware Decryption Unlocks New Insights
Nov 1
Bishop Fox Exploited FortiManager rce12 min read