STRUCTURED THREAT INTELLIGENCE FOR THE CLOUD COMMUNITY

Aviatrix Threat Research Center

Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.

The Aviatrix Threat Research Center provides security teams with:

A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
What attackers exploited, and which enforcement gaps let them move.
Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.

Kill Chain Coverage

ATT&CK Mapped

Real-World IOCs

Threat ReportsLive Intelligence

Recent Breaches, Security Incidents & Vulnerabilities

A unified view of real-world cloud threats — combining AI-powered analysis, security research, and expert perspectives through a consistent, cloud-specific framework.

AI-Powered Threat Analysis

Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.

Browse by Industry

Accounting Aerospace Aerospace/Aviation Agriculture Airlines/Aviation Animation Apparel/Fashion Architecture/Planning Artificial Intelligence Artificial Intelligence/Machine Learning Arts/Crafts Automotive Aviation/Aerospace Banking/Mortgage Biotechnology/Greentech Blockchain/Cryptocurrency Broadcast Media Broadcasting Media Broadcasting/Media Building Materials Business Supplies/Equipment Capital Markets/Hedge Fund/Private Equity Chemical Chemicals Civic/Social Organization Civil Engineering Cloud Computing Cloud Computing/SaaS Cloud Native Security Fabric (CNSF)Cloud Services Commercial Facilities Commercial Real Estate Computer Games Computer Hardware Computer Networking Computer Software/Engineering Computer/Network Security Construction Consulting Consumer Electronics Consumer Goods Consumer Services Cosmetics Cosmetics Critical Manufacturing Cryptocurrencies Cryptocurrency Customer Services Cybersecurity Dairy Dating/Personal Services Dating/Social Platforms Defense/Space Design E-Learning Education Management Electrical/Electronic Manufacturing Emergency Services Energy Energy/Oil/Solar/Greentech Entertainment/Movie Production Environmental Services Events Services Executive Office Facilities Services Farming Fashion/Apparel Financial Services Fine Art Fishery Food Production Food/Beverages Fortune 500 companies Franchising Fundraising Gambling/Casinos Gaming Gaming/Casinos Government Administration Government Facilities Government Relations Graphic Design/Web Design Health Care / Life Sciences Healthcare Higher Education/Acadamia Hospitality Hospitals Human Resources/HR Import/Export Individual/Family Services Industrial Automation Information Services Information Technology/IT Insurance International Affairs International Trade/Development Internet Investment Banking/Venture Investment Management/Hedge Fund/Private Equity Judicial Judiciary Law Enforcement Law Practice/Law Firms Legal Services Legislative Office Leisure/Travel Logistics/Procurement Luxury Goods/Jewelry Machinery Management Consulting Manufacturing Maritime Market Research Marketing/Advertising/Sales Mechanical or Industrial Engineering Media Production Medical Equipment Medical Practice Military Industry Mining/Metals Mobile Museums/Institutions Music Newspapers/Journalism Non-Profit/Volunteering Oil/Energy/Solar/Greentech Online Publishing Outsourcing/Offshoring Package/Freight Delivery Parking Pharmaceuticals Philanthropy Photography Plastics Political Organization Primary/Secondary Education Professional Services Professional Training Public Relations/PR Public Safety Publishing Industry Railroad Manufacture Real Estate/Mortgage Recreational Facilities/Services Religious Institutions Renewables/Environment Research Industry Restaurants Retail Industry Robotics Rural Healthcare Security/Investigations Semiconductors Shipbuilding Social Media/Internet Sporting Goods Sports Staffing/Recruiting Supermarkets Technology Technology/IT Telecommunications Think Tanks Toys and Games Transportation Travel/Tourism Trucking/Freight Utilities Venture Capital/VC Warehousing Water and Waste Management Water and Wastewater Water and Wastewater Systems Water and Wastewater Treatment Water Treatment Water, Waste, Steam, and Air Conditioning Services Water/Waste Management Water/Wastewater Water/Wastewater Management Water/Wastewater/Utilities Wholesale Wine/Spirits Wireless Writing/Editing

Displaying 3781 to 3792 of 6928 threat reports

Computer Software/Engineering6 months ago

Vercel's April 2026 Security Breach: Lessons in Third-Party Integration Risks

In April 2026, Vercel, a cloud development platform, experienced a security breach originating from a compromised third-party AI tool, Context.ai. An attacker exploited this tool to gain unauthorized access to a Vercel employee's Google Workspace account, subsequently infiltrating Vercel's internal systems. This intrusion led to the exposure of non-sensitive customer environment variables, including API keys and database credentials. Vercel promptly notified affected customers, recommending immediate credential rotation and enhanced security measures. The company engaged incident response experts and law enforcement to investigate and mitigate the breach, ensuring that core services remained operational throughout the incident. This incident underscores the escalating risks associated with third-party integrations and OAuth permissions in cloud environments. As organizations increasingly adopt AI tools and third-party services, the potential for supply chain attacks grows, emphasizing the need for stringent access controls, regular security audits, and comprehensive monitoring to safeguard sensitive data and maintain trust.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Telecommunications6 months ago

CISA Adds 8 Exploited Flaws to KEV Catalog

In April 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added eight vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation. Notably, CVE-2023-27351, an improper authentication flaw in PaperCut NG/MF, allows attackers to bypass authentication via the SecurityRequestFilter class. Other vulnerabilities affect JetBrains TeamCity, Kentico Xperience, Quest KACE SMA, Synacor Zimbra, and Cisco Catalyst SD-WAN Manager. ([thehackernews.com](https://thehackernews.com/2026/04/cisa-adds-8-exploited-flaws-to-kev-sets.html?utm_source=openai)) The inclusion of these vulnerabilities underscores the persistent threat posed by both new and longstanding security flaws. Organizations are urged to promptly apply patches to mitigate risks associated with these actively exploited vulnerabilities.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Financial Services6 months ago

Understanding the Surge in Identity-Based Cyber Attacks

In early 2026, a significant cybersecurity breach occurred when attackers exploited identity-based vulnerabilities to gain unauthorized access to sensitive systems. By leveraging stolen credentials obtained through sophisticated phishing campaigns and infostealer malware, the threat actors bypassed traditional security measures, including multi-factor authentication (MFA). This breach resulted in the exfiltration of vast amounts of personal and corporate data, leading to substantial financial and reputational damage for the affected organizations. ([helpnetsecurity.com](https://www.helpnetsecurity.com/2026/02/18/identity-based-cyberattacks-compromise/?utm_source=openai)) This incident underscores a growing trend where attackers prefer logging in with stolen credentials over exploiting technical vulnerabilities. The prevalence of identity-based attacks has surged, with reports indicating that 75% of breaches now originate from compromised identities. ([securitytoday.de](https://www.securitytoday.de/en/2026/03/19/identity-attacks-2026-why-hackers-no-longer-break-in-they-log-in/?utm_source=openai))

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(low)

EExfiltration(high)

IImpact(medium)

Read report

Computer Software/Engineering6 months ago

Critical Vulnerability in Google's Antigravity IDE Leads to Remote Code Execution

In January 2026, cybersecurity researchers identified a critical vulnerability in Google's AI-powered integrated development environment (IDE), Antigravity. The flaw, stemming from insufficient input sanitization in the 'find_by_name' tool, allowed attackers to execute arbitrary code by exploiting prompt injection techniques. This vulnerability enabled sandbox escape and remote code execution, effectively bypassing Antigravity's Secure Mode protections. Google addressed the issue with a patch released on February 28, 2026. ([cyberscoop.com](https://cyberscoop.com/google-antigravity-pillar-security-agent-sandbox-escape-remote-code-execution/?utm_source=openai)) The incident underscores the growing security challenges associated with AI-driven development tools. As organizations increasingly integrate AI agents into their workflows, ensuring robust input validation and sandboxing mechanisms becomes paramount to prevent similar vulnerabilities.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Financial Services6 months ago

NGate Malware Exploits HandyPay App to Steal NFC Data in Brazil

In April 2026, ESET researchers identified a new variant of the NGate Android malware targeting users in Brazil. This malware abuses a legitimate application called HandyPay by injecting malicious code, likely generated with AI assistance. The campaign, active since November 2025, distributes the trojanized app through fake lottery websites and counterfeit Google Play pages. Once installed, the app prompts users to set it as the default NFC payment application, enter their payment card PIN, and tap their card against the device. The malware then relays the NFC data and PIN to attacker-controlled devices, enabling unauthorized contactless transactions and ATM withdrawals. ([globenewswire.com](https://www.globenewswire.com/news-release/2026/04/21/3277653/0/en/eset-research-new-ngate-hides-in-nfc-payment-app-possibly-built-with-ai.html?utm_source=openai)) This incident underscores the evolving tactics of cybercriminals, who are now leveraging AI-generated code to enhance malware capabilities and employing sophisticated social engineering techniques to distribute malicious applications. The focus on NFC payment data highlights the increasing targeting of mobile payment systems, necessitating heightened vigilance and security measures for both users and financial institutions. ([globenewswire.com](https://www.globenewswire.com/news-release/2026/04/21/3277653/0/en/eset-research-new-ngate-hides-in-nfc-payment-app-possibly-built-with-ai.html?utm_source=openai))

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Financial Services6 months ago

Insider Betrayal: Ransomware Negotiator Aids BlackCat Attacks in 2023

In April 2023, Angelo Martino, a 41-year-old ransomware negotiator from Land O'Lakes, Florida, began collaborating with the BlackCat ransomware group to exploit confidential information from his clients. By providing BlackCat attackers with sensitive details such as insurance policy limits and internal negotiation strategies, Martino enabled the cybercriminals to demand higher ransom payments from five U.S. companies. This collusion led to significant financial losses for the affected organizations. ([thehackernews.com](https://thehackernews.com/2026/04/ransomware-negotiator-pleads-guilty-to.html?utm_source=openai)) This case underscores a troubling trend of insiders leveraging their positions to facilitate cyberattacks, highlighting the critical need for robust internal security measures and vigilant monitoring of personnel with access to sensitive information.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(high)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Utilities6 months ago

BRIDGE:BREAK Vulnerabilities Threaten Critical Infrastructure Security

In April 2026, Forescout Technologies identified 22 vulnerabilities in serial-to-IP converters from Lantronix and Silex, devices integral to connecting legacy industrial equipment to modern networks. These vulnerabilities, collectively named BRIDGE:BREAK, could allow attackers to disrupt operations, move laterally across networks, tamper with sensitive data, or take control of affected devices. The flaws include remote code execution, authentication bypass, firmware manipulation, denial of service, and exposure of confidential information. Notably, tens of thousands of these devices are accessible over the internet, significantly broadening the attack surface for potential cyberattacks. This discovery underscores the persistent security challenges in operational technology environments, especially concerning devices that bridge legacy systems with modern infrastructure. The prevalence of these vulnerabilities highlights the need for organizations to reassess their security postures, particularly in sectors like utilities, manufacturing, and healthcare, where such devices are commonly deployed.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(high)

Read report

Computer Software/Engineering6 months ago

Axios npm Supply Chain Compromise: A 2026 Case Study

On March 31, 2026, attackers compromised the npm account of a lead maintainer of Axios, a widely-used JavaScript HTTP client library, and released two malicious versions: axios@1.14.1 and axios@0.30.4. These versions included a trojanized dependency, plain-crypto-js@4.2.1, which executed a post-install script to deploy a cross-platform Remote Access Trojan (RAT) targeting Windows, macOS, and Linux systems. The malicious packages were available for approximately three hours before being removed, during which time they could have been installed by numerous developers and CI/CD pipelines, potentially leading to widespread system compromises. ([github.com](https://github.com/axios/axios/issues/10636?utm_source=openai)) This incident underscores the growing threat of supply chain attacks in the software development ecosystem. The rapid deployment and removal of the malicious packages highlight the need for developers and organizations to implement stringent security measures, such as verifying package integrity, pinning dependencies to known safe versions, and monitoring for anomalous behavior in development and production environments.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(medium)

IImpact(medium)

Read report

Government Administration6 months ago

CISA Adds Eight Exploited Vulnerabilities to KEV Catalog

On April 20, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities (KEV) Catalog by adding eight new vulnerabilities, citing evidence of active exploitation. These vulnerabilities affect a range of products, including PaperCut NG/MF, JetBrains TeamCity, Kentico Xperience, Quest KACE Systems Management Appliance, Synacor Zimbra Collaboration Suite, and Cisco Catalyst SD-WAN Manager. The inclusion of these vulnerabilities underscores the persistent threat posed by unpatched software flaws, which can serve as entry points for malicious actors to compromise systems and exfiltrate sensitive data. The addition of these vulnerabilities to the KEV Catalog highlights the evolving landscape of cyber threats, where attackers continuously exploit both new and longstanding vulnerabilities. Organizations are urged to prioritize the remediation of these vulnerabilities to mitigate potential risks and enhance their cybersecurity posture.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Computer Software/Engineering6 months ago

Emerging Threat: Malware Embedded in WAV Audio Files

In April 2026, cybersecurity researchers identified a novel malware delivery method where threat actors embedded malicious payloads within WAV audio files. Unlike traditional steganography, these WAV files contained Base64-encoded malware in place of actual audio data, resulting in files that played as noise. Upon decoding, the payload revealed an XOR-encoded Portable Executable (PE) file, which, once decrypted, executed the malicious code on the victim's system. This technique allowed attackers to bypass conventional security measures by disguising malware within seemingly innocuous audio files. This incident underscores the evolving sophistication of malware delivery methods, highlighting the need for advanced detection mechanisms capable of identifying non-traditional attack vectors. As threat actors continue to exploit unconventional file formats, organizations must enhance their security protocols to detect and mitigate such innovative threats.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(low)

IImpact(high)

Read report

Health Care / Life Sciences6 months ago

Change Healthcare Ransomware Attack: A Wake-Up Call for Healthcare Cybersecurity

In February 2024, Change Healthcare, a subsidiary of UnitedHealth Group, suffered a ransomware attack by the ALPHV/BlackCat group. The attackers exploited compromised credentials lacking multi-factor authentication to access the company's systems, exfiltrated sensitive data, and deployed ransomware that severely disrupted operations. This breach halted electronic payments and medical claims processing, forcing patients to pay out-of-pocket for medications and healthcare services. The attack had an unprecedented impact on the U.S. healthcare system, causing widespread disruptions in healthcare delivery. The financial fallout was equally staggering, with UnitedHealth Group incurring approximately $2.87 billion in response costs during 2024. Additionally, the company paid $22 million in ransom to the attackers and provided over $6 billion in assistance to affected healthcare providers. The incident garnered global attention, highlighting the vulnerabilities in healthcare cybersecurity and underscoring the critical need for robust defenses in this sector, where the consequences of cyberattacks extend far beyond financial losses to directly affect patient care and safety. This incident underscores the growing dangers of ransomware attacks targeting healthcare data.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Financial Services6 months ago

Navigating AI Security: Understanding Threat Modeling Frameworks in 2026

In 2026, the evolution of artificial intelligence (AI) systems has necessitated the development of specialized threat modeling frameworks to address unique security challenges. Traditional models like STRIDE have been adapted to consider AI-specific threats, while new frameworks such as MAESTRO and STRIFE have emerged to provide comprehensive analyses of AI systems' vulnerabilities. These frameworks focus on aspects like adversarial attacks, data poisoning, and model manipulation, ensuring a holistic approach to AI security. The increasing deployment of AI in critical sectors underscores the importance of robust threat modeling. Organizations are now integrating AI-native threat modeling tools into their security practices to proactively identify and mitigate potential risks, thereby enhancing the resilience of AI systems against evolving cyber threats.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

1...314 315 316 317 318...578

Security Research & Insights

Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs

All Research Articles

exec-13ea3b13-c046-4c3f-bdef-bfc6448ce51d

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Matt Snyder

Oct 26, 202610 min read

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

Matt Snyder

Oct 21, 202613 min read

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Matt Snyder

Oct 21, 202615 min read

Market Perspectives

Market Perspectives offering expert commentary and select breach analysis from industry leaders

Read All Blogs

What Could Have Stopped the 2023 MGM Breach v4

Cloud Native Security Fabric

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

Cloud Network Security

John Qian

Jul 31, 20257 min read

Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

Scott Leatherman

Jul 23, 202512 min read

Cloud Network Security

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

Tom Davis

Jun 25, 20257 min read

How CNSF Protects Cloud Workloads

Cloud attackers don’t rely on a single exploit — they rely on paths.

Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.

Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.

With CNSF, enterprises can:

Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.

See Your Attack Paths. Close the Gaps with CNSF.

Blast radius starts where your enforcement stops.

Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.

The Executive Assistant That Broke the Company Why Shadow AI is the New Cloud Crisis card image

Your assessment delivers:

The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.

Explore the Workload Attack Path Assessment

Containment Era Intelligence

The threat landscape has changed.
Has your question changed with it?

In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.

Interactive ToolOpen Threat Command Center Quick AssessmentAssess My Blast Radius

Tracked Campaigns

82%

Intrusions are malware-free

— CrowdStrike GTR 2026

29 min

Avg. eCrime breakout time

— CrowdStrike GTR 2026

27 sec

Fastest observed breakout

— CrowdStrike GTR 2026

This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.

Contain the Blast Radius

See the attack paths already present in your environment — and where CNSF containment controls would break them.

Free Containment Assessment Under Active Attack?

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Vercel's April 2026 Security Breach: Lessons in Third-Party Integration Risks

CISA Adds 8 Exploited Flaws to KEV Catalog

Understanding the Surge in Identity-Based Cyber Attacks

Critical Vulnerability in Google's Antigravity IDE Leads to Remote Code Execution

NGate Malware Exploits HandyPay App to Steal NFC Data in Brazil

Insider Betrayal: Ransomware Negotiator Aids BlackCat Attacks in 2023

BRIDGE:BREAK Vulnerabilities Threaten Critical Infrastructure Security

Axios npm Supply Chain Compromise: A 2026 Case Study

CISA Adds Eight Exploited Vulnerabilities to KEV Catalog

Emerging Threat: Malware Embedded in WAV Audio Files

Change Healthcare Ransomware Attack: A Wake-Up Call for Healthcare Cybersecurity

Navigating AI Security: Understanding Threat Modeling Frameworks in 2026

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed.
Has your question changed with it?

Contain the Blast Radius

Products

By Role

Customer Stories

Solutions

Resources

Industry

Company

Tools

Security & Legal

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Vercel's April 2026 Security Breach: Lessons in Third-Party Integration Risks

CISA Adds 8 Exploited Flaws to KEV Catalog

Understanding the Surge in Identity-Based Cyber Attacks

Critical Vulnerability in Google's Antigravity IDE Leads to Remote Code Execution

NGate Malware Exploits HandyPay App to Steal NFC Data in Brazil

Insider Betrayal: Ransomware Negotiator Aids BlackCat Attacks in 2023

BRIDGE:BREAK Vulnerabilities Threaten Critical Infrastructure Security

Axios npm Supply Chain Compromise: A 2026 Case Study

CISA Adds Eight Exploited Vulnerabilities to KEV Catalog

Emerging Threat: Malware Embedded in WAV Audio Files

Change Healthcare Ransomware Attack: A Wake-Up Call for Healthcare Cybersecurity

Navigating AI Security: Understanding Threat Modeling Frameworks in 2026

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed. Has your question changed with it?

Contain the Blast Radius

The threat landscape has changed.
Has your question changed with it?