Find what you’re looking for
Browse everything
31 results in Research & Perspectives
Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw
A PHP honeypot logged automated scanners reaching payload delivery in 4 minutes 22 seconds. Findings on attack behavior, telemetry gaps, and CVE-2026-109618.
php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had
CVE-2026-109618 and CVE-2026-109619 patched today after a pre-patch leak. What CISOs need to know about exposure, EOL versions, and the hidden PHP problem.
Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface
Eight eMudhra TLS certificates with keys as weak as 4 bits open AiTM attack paths across VPNs, containers, and IoT. What your organization must assess.
Kubernetes RBAC is Not Enough
RBAC is not a configuration you complete: it's an attack surface you maintain. A guide to the Kubernetes privilege escalation paths most clusters miss, with audit commands and detection rules you can run today.
The Edge Device Isn't Your Last Line of Defense. It's Their First Target.
China's QTFY ran 8 years against the Federal Reserve, DOJ, and the U.S. Senate by owning the security appliances in front of them. Your perimeter model assumes the boundary device is trustworthy. Theirs didn't.
AI Trust Abuse: A Detection Engineer's Field Guide to Agent-Abuse Attacks
AI trust attacks exploit the channel phishing training never reached. Detection field guide covering agent hijacking, slopsquatting, prompt injection, and ecosystem threats.
OpenAI Lost Control of Its Models. Then Anthropic Did Too. That Is Not a Coincidence.
Anthropic disclosed three Claude model incidents that reached real production systems. After OpenAI, the pattern is confirmed: software-layer AI controls have a structural ceiling.
Attackers Learned to Use AI. Now They Built Tools to Destroy It.
Purpose-built AI ransomware and autonomous agent attacks hit AI platforms on the same day. What CISOs need to understand about the shift now underway.
Living-off-the-Agent: How AI Tool Misuse Became the Insider Threat Nobody Provisioned
AI agents hold real credentials and act at machine speed. Learn how OWASP ASI02 tool misuse enables insider-style attacks and how to defend your agent runtime.
Anatomy of the KEV Catalog: What 1,612 Exploited Vulnerabilities Reveal About Attacker Behavior
An analysis of all 1,612 CISA KEV entries shows what attackers actually exploit: network-reachable, unauthenticated, low-complexity targets. See the data.
Someone Evicted TeamPCP from Your Cloud. That Is Not Good News.
PCPJack evicts TeamPCP from compromised cloud environments and sweeps 30+ credential types. If you responded to Q1 exposure, your timeline may have a gap.
Introducing the Aviatrix Cloud Threat Command Center: Built for the Containment Era
The Aviatrix Cloud Threat Command Center helps enterprises enter the Containment Era: understand the threat landscape, find gaps, and determine blast radius.