STRUCTURED THREAT INTELLIGENCE FOR THE CLOUD COMMUNITY

Aviatrix Threat Research Center

Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.

The Aviatrix Threat Research Center provides security teams with:

A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
What attackers exploited, and which enforcement gaps let them move.
Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.

Kill Chain Coverage

ATT&CK Mapped

Real-World IOCs

Threat ReportsLive Intelligence

Recent Breaches, Security Incidents & Vulnerabilities

A unified view of real-world cloud threats — combining AI-powered analysis, security research, and expert perspectives through a consistent, cloud-specific framework.

AI-Powered Threat Analysis

Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.

Browse by Industry

Accounting Aerospace Aerospace/Aviation Agriculture Airlines/Aviation Animation Apparel/Fashion Architecture/Planning Artificial Intelligence Artificial Intelligence/Machine Learning Arts/Crafts Automotive Aviation/Aerospace Banking/Mortgage Biotechnology/Greentech Blockchain/Cryptocurrency Broadcast Media Broadcasting Media Broadcasting/Media Building Materials Business Supplies/Equipment Capital Markets/Hedge Fund/Private Equity Chemical Chemicals Civic/Social Organization Civil Engineering Cloud Computing Cloud Computing/SaaS Cloud Native Security Fabric (CNSF)Cloud Services Commercial Facilities Commercial Real Estate Computer Games Computer Hardware Computer Networking Computer Software/Engineering Computer/Network Security Construction Consulting Consumer Electronics Consumer Goods Consumer Services Cosmetics Cosmetics Critical Manufacturing Cryptocurrencies Cryptocurrency Customer Services Cybersecurity Dairy Dating/Personal Services Dating/Social Platforms Defense/Space Design E-Learning Education Management Electrical/Electronic Manufacturing Emergency Services Energy Energy/Oil/Solar/Greentech Entertainment/Movie Production Environmental Services Events Services Executive Office Facilities Services Farming Fashion/Apparel Financial Services Fine Art Fishery Food Production Food/Beverages Fortune 500 companies Franchising Fundraising Gambling/Casinos Gaming Gaming/Casinos Government Administration Government Facilities Government Relations Graphic Design/Web Design Health Care / Life Sciences Healthcare Higher Education/Acadamia Hospitality Hospitals Human Resources/HR Import/Export Individual/Family Services Industrial Automation Information Services Information Technology/IT Insurance International Affairs International Trade/Development Internet Investment Banking/Venture Investment Management/Hedge Fund/Private Equity Judicial Judiciary Law Enforcement Law Practice/Law Firms Legal Services Legislative Office Leisure/Travel Logistics/Procurement Luxury Goods/Jewelry Machinery Management Consulting Manufacturing Maritime Market Research Marketing/Advertising/Sales Mechanical or Industrial Engineering Media Production Medical Equipment Medical Practice Military Industry Mining/Metals Mobile Museums/Institutions Music Newspapers/Journalism Non-Profit/Volunteering Oil/Energy/Solar/Greentech Online Publishing Outsourcing/Offshoring Package/Freight Delivery Parking Pharmaceuticals Philanthropy Photography Plastics Political Organization Primary/Secondary Education Professional Services Professional Training Public Relations/PR Public Safety Publishing Industry Railroad Manufacture Real Estate/Mortgage Recreational Facilities/Services Religious Institutions Renewables/Environment Research Industry Restaurants Retail Industry Robotics Rural Healthcare Security/Investigations Semiconductors Shipbuilding Social Media/Internet Sporting Goods Sports Staffing/Recruiting Supermarkets Technology Technology/IT Telecommunications Think Tanks Toys and Games Transportation Travel/Tourism Trucking/Freight Utilities Venture Capital/VC Warehousing Water and Waste Management Water and Wastewater Water and Wastewater Systems Water and Wastewater Treatment Water Treatment Water, Waste, Steam, and Air Conditioning Services Water/Waste Management Water/Wastewater Water/Wastewater Management Water/Wastewater/Utilities Wholesale Wine/Spirits Wireless Writing/Editing

Displaying 409 to 420 of 6836 threat reports

Newspapers/Journalism3 weeks ago

Russian and Iranian Actors Weaponize OpenAI's ChatGPT for Sophisticated Influence Operations

In 2024, OpenAI identified and disrupted two sophisticated AI-powered influence operations conducted by Russian and Iranian threat actors who used ChatGPT to create fake journalist personas and fraudulent think tanks. The Russian campaign, dubbed 'Dark Clark,' successfully established the Social Research Center as a front organization, employing unwitting Latin American staff to spread anti-Ukraine propaganda and interfere in regional politics through fabricated audio clips and disinformation. The Iranian operation created seven fake journalist identities that placed nearly 100 articles across legitimate international media outlets, focusing on U.S.-Iran tensions and Middle Eastern geopolitics. This incident represents a critical evolution in information warfare, demonstrating how nation-state actors are leveraging generative AI to scale and legitimize disinformation campaigns. The successful infiltration of mainstream media through AI-generated content highlights an emerging threat vector that traditional security controls are not designed to detect or prevent.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(high)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Computer/Network Security3 weeks ago

MonsterCloud Ransomware Recovery Fraud: When Incident Response Goes Wrong

In September 2024, Zohar Pinhasi, CEO of MonsterCloud, was indicted on federal wire fraud charges for operating a deceptive ransomware recovery scheme from 2018 to 2023. Pinhasi falsely claimed his company possessed proprietary decryption tools to recover ransomware-encrypted data without paying criminals. Instead, he secretly paid ransoms using client funds while charging inflated fees up to twice the actual ransom amount. The scheme affected hundreds of clients across the US and Canada, with MonsterCloud collecting over $19 million in fees while paying approximately $8 million in ransoms. This case highlights the growing sophistication of fraud within the ransomware economy, where bad actors exploit victims' desperation during crisis situations. The incident demonstrates how the lack of transparency and regulation in the ransomware recovery industry creates opportunities for exploitation, making it critical for organizations to verify the legitimacy and methods of incident response providers.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Primary/Secondary Education3 weeks ago

764 Criminal Network Leader Sentenced: How Encrypted Platforms Enable Child Exploitation

Prasan Nepal, the 21-year-old leader of the nihilistic violent extremist network 764, pleaded guilty to conspiracy to commit sexual exploitation of a child and faces 15-30 years in prison. Operating under the alias 'Trippy,' Nepal led the criminal organization for nearly four years, orchestrating the grooming, manipulation, and extortion of minors as young as 13 across multiple jurisdictions. The group required new members to produce child sexual abuse material and commit acts of self-harm, violence, and animal cruelty as part of their initiation and ongoing participation in the network. This case represents a significant victory in the ongoing law enforcement crackdown against 764 and affiliated groups within 'The Com' collective, with multiple arrests and lengthy sentences being handed down in 2024-2025, demonstrating the increasing effectiveness of authorities in dismantling these sophisticated online criminal networks that exploit vulnerable populations.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Utilities3 weeks ago

DOJ Disrupts Chinese APT Flax Typhoon's Critical Infrastructure Campaign

In December 2024, the Department of Justice and FBI seized two hacking tools linked to Chinese state-sponsored group Flax Typhoon and Integrity Technology Group, a sanctioned Chinese firm. The seizure targeted Microscan, a vulnerability scanning tool, and FishHub, a spearphishing platform that facilitated attacks on critical infrastructure including South Carolina power companies, airports in Japan and Poland, and Taiwanese universities. The operation disrupted a sophisticated campaign combining automated scanning, large-scale botnets, and targeted exploitation techniques to steal sensitive data from organizations worldwide, with particular focus on U.S. critical infrastructure sectors. This incident underscores the escalating threat from Chinese APT groups positioning themselves within critical infrastructure networks for potential future disruption. The coordinated law enforcement response reflects growing urgency around protecting operational technology systems and preventing pre-positioned access that could enable catastrophic attacks during geopolitical tensions.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(medium)

Read report

Consumer Electronics3 weeks ago

Samsung Galaxy S26 Suffers Triple Breach at Pwn2Own Ireland 2026

On October 8, 2026, during the second day of Pwn2Own Ireland 2026, security researchers successfully exploited 45 unique zero-day vulnerabilities across multiple devices, earning $232,500 in cash awards. The Samsung Galaxy S26 flagship smartphone was compromised three separate times by different research teams including KAIST Hacking Lab's Kyeongmin Kim, PetoWorks, and a collaborative team from CENSUS Labs. Additional targets included the Sonos Era 300, Home Assistant Green smart home hub, and Oracle Autonomous AI Database, demonstrating widespread vulnerabilities across consumer electronics and enterprise infrastructure. This incident highlights the continuing security challenges in mobile device firmware and the growing attack surface presented by smart home and AI infrastructure systems. As organizations increasingly rely on interconnected devices and AI-powered systems, these research findings underscore the critical need for proactive vulnerability management and zero-trust security architectures.

Low impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(low)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(high)

Read report

Banking/Mortgage3 weeks ago

Empire Market Takedown: 40-Year Sentence Marks New Era in Dark Web Enforcement

Raheim Hamilton, co-creator of Empire Market, was sentenced to 40 years in prison for operating one of the largest dark web marketplaces from 2017 to 2020. The marketplace facilitated $430 million in illegal transactions, primarily drug sales totaling $375 million, serving 1.68 million users at its peak. Hamilton and co-defendant Thomas Pavey used cryptocurrency, encryption, and Tor networks to help users evade law enforcement detection while laundering proceeds through mixing services. This case highlights the growing sophistication of cybercrime marketplaces and law enforcement's enhanced capabilities to track cryptocurrency transactions and dismantle dark web operations, reflecting the ongoing battle between cybercriminals and authorities in the digital underground economy.

Critical impact

Kill Chain

ICInitial Compromise(medium)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Apparel/Fashion3 weeks ago

ASOS Breach Exposes Critical Gap in Third-Party Platform Security

In October 2026, UK fashion retailer ASOS suffered a significant data breach when the Xuanye Group threat actors successfully executed a social engineering attack against an ASOS employee. The attackers impersonated a trusted contact to steal login credentials, which were then used to access third-party platforms containing customer data. The breach exposed full names, contact details, and account-related information of customers, though payment card data and passwords remained secure. The attackers demonstrated their access by sending malicious push notifications through the ASOS mobile app, claiming data theft and directing customers to contact them via Telegram. This incident highlights the growing sophistication of social engineering attacks targeting retail companies and the critical need for robust employee security awareness training. As threat actors increasingly exploit human vulnerabilities to bypass technical controls, organizations face mounting pressure to implement zero-trust security models and enhanced identity verification processes.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Financial Services3 weeks ago

Uranium Finance Hack: How $53M Was Stolen Through Smart Contract Exploits

In April 2021, Jonathan Spalletta exploited smart contract vulnerabilities in Uranium Finance, a decentralized cryptocurrency exchange on Binance's BNB Chain, stealing $53.3 million across two separate attacks. The first breach netted $1.4 million through zero-token withdrawal commands, followed by extortion for a sham bug bounty. Three weeks later, Spalletta exploited a transaction verification flaw that allowed him to drain 90% of the exchange's liquidity pools, forcing immediate shutdown. He laundered the stolen funds through Tornado Cash mixer and spent proceeds on collectibles including Magic cards and rare coins before being convicted in 2026. This case highlights the growing sophistication of DeFi attacks and the critical need for robust smart contract security as decentralized finance platforms become prime targets for cybercriminals seeking to exploit code vulnerabilities for massive financial gain.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Telecommunications3 weeks ago

Critical Cisco Nexus Vulnerabilities Enable Complete Switch Takeover

In October 2026, Cisco disclosed five critical vulnerabilities (CVE-2026-76471, CVE-2026-76485, CVE-2026-76486, CVE-2026-76501, and CVE-2026-76465) in its NX-OS data center operating system affecting Nexus 3000 and 9000 Series switches. These flaws stem from validation failures in NX-API, Next Generation OAM (NGOAM), and MPLS OAM features, allowing remote attackers to execute arbitrary code with root privileges or cause denial-of-service conditions. The vulnerabilities require specific features to be enabled but can lead to complete switch compromise when exploited through crafted HTTP requests or malicious network packets. These vulnerabilities highlight the growing attack surface of critical network infrastructure as data centers become increasingly complex and feature-rich. With network switches serving as foundational components of enterprise and cloud environments, successful exploitation could enable lateral movement, traffic interception, and complete network compromise across multi-cloud deployments.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(high)

Read report

Computer Software/Engineering3 weeks ago

FakeGit Campaign Exploits 17,000+ GitHub Repositories to Distribute Malware

The FakeGit malware campaign resurfaced in October 2024 with over 17,610 malicious GitHub repositories distributing SmartLoader malware and StealC infostealer. Threat actors exploited legitimate developer accounts and created convincing fake repositories with README files containing download buttons that delivered malicious ZIP archives. In just 34 hours starting October 4, attackers pushed over 13,000 repositories at a peak rate of 2,999 per hour, targeting AI skills repositories and MCP servers listed in public registries to maximize credibility and infection rates. This incident highlights the growing trend of supply chain attacks targeting developer platforms and AI infrastructure. As organizations increasingly adopt AI-powered development tools and automated deployment pipelines, attackers are exploiting trust relationships in code repositories to bypass traditional security controls and distribute malware at scale.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(low)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(medium)

Read report

Consumer Electronics3 weeks ago

Midnight Mimosa Supply Chain Attack Turns Android Phones Into Malware Botnets

The 'Midnight Mimosa' malware campaign compromised low-cost Android smartphones through supply chain infiltration, embedding malicious firmware on devices using MediaTek chipsets from manufacturers including Doogee and Cubot. Active for approximately two years across 150+ countries, the malware granted attackers system-level privileges to silently install applications, conduct ad fraud, and convert infected devices into residential proxies. With thousands of victims primarily in Mexico, France, Italy, the United States, Germany, Brazil, and Spain, the campaign demonstrates sophisticated evasion techniques including temporarily disabling Google Play Store protections during malicious app installations. This incident highlights the growing threat of supply chain attacks targeting mobile devices, coinciding with increased regulatory scrutiny of hardware security and the proliferation of IoT botnets leveraging compromised consumer devices for proxy networks.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Utilities3 weeks ago

FBI Takes Down Chinese State-Sponsored Hacking Infrastructure Targeting Global Critical Infrastructure

In October 2026, the FBI seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate MicroScan and FishHub hacking tools targeting critical infrastructure worldwide. The operation disrupted China-based Integrity Technology Group's vulnerability scanning platform and spear-phishing tool, which had successfully breached power companies, airports, universities, and energy providers across the United States, Taiwan, Japan, and Poland. Investigators discovered stolen data from over 20 organizations on servers linked to the operation, including six Taiwanese universities. This incident highlights the escalating sophistication of state-sponsored supply chain attacks targeting critical infrastructure, demonstrating how nation-state actors increasingly rely on third-party contractors to expand their cyber operations while maintaining plausible deniability.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

1...33 34 35 36 37...570

Security Research & Insights

Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs

All Research Articles

exec-13ea3b13-c046-4c3f-bdef-bfc6448ce51d

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Matt Snyder

Oct 26, 202610 min read

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

Matt Snyder

Oct 21, 202613 min read

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Matt Snyder

Oct 21, 202615 min read

Market Perspectives

Market Perspectives offering expert commentary and select breach analysis from industry leaders

Read All Blogs

What Could Have Stopped the 2023 MGM Breach v4

Cloud Native Security Fabric

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

Cloud Network Security

John Qian

Jul 31, 20257 min read

Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

Scott Leatherman

Jul 23, 202512 min read

Cloud Network Security

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

Tom Davis

Jun 25, 20257 min read

How CNSF Protects Cloud Workloads

Cloud attackers don’t rely on a single exploit — they rely on paths.

Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.

Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.

With CNSF, enterprises can:

Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.

See Your Attack Paths. Close the Gaps with CNSF.

Blast radius starts where your enforcement stops.

Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.

The Executive Assistant That Broke the Company Why Shadow AI is the New Cloud Crisis card image

Your assessment delivers:

The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.

Explore the Workload Attack Path Assessment

Containment Era Intelligence

The threat landscape has changed.
Has your question changed with it?

In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.

Interactive ToolOpen Threat Command Center Quick AssessmentAssess My Blast Radius

Tracked Campaigns

82%

Intrusions are malware-free

— CrowdStrike GTR 2026

29 min

Avg. eCrime breakout time

— CrowdStrike GTR 2026

27 sec

Fastest observed breakout

— CrowdStrike GTR 2026

This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.

Contain the Blast Radius

See the attack paths already present in your environment — and where CNSF containment controls would break them.

Free Containment Assessment Under Active Attack?

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Russian and Iranian Actors Weaponize OpenAI's ChatGPT for Sophisticated Influence Operations

MonsterCloud Ransomware Recovery Fraud: When Incident Response Goes Wrong

764 Criminal Network Leader Sentenced: How Encrypted Platforms Enable Child Exploitation

DOJ Disrupts Chinese APT Flax Typhoon's Critical Infrastructure Campaign

Samsung Galaxy S26 Suffers Triple Breach at Pwn2Own Ireland 2026

Empire Market Takedown: 40-Year Sentence Marks New Era in Dark Web Enforcement

ASOS Breach Exposes Critical Gap in Third-Party Platform Security

Uranium Finance Hack: How $53M Was Stolen Through Smart Contract Exploits

Critical Cisco Nexus Vulnerabilities Enable Complete Switch Takeover

FakeGit Campaign Exploits 17,000+ GitHub Repositories to Distribute Malware

Midnight Mimosa Supply Chain Attack Turns Android Phones Into Malware Botnets

FBI Takes Down Chinese State-Sponsored Hacking Infrastructure Targeting Global Critical Infrastructure

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed.
Has your question changed with it?

Contain the Blast Radius

Products

By Role

Customer Stories

Solutions

Resources

Industry

Company

Tools

Security & Legal

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Russian and Iranian Actors Weaponize OpenAI's ChatGPT for Sophisticated Influence Operations

MonsterCloud Ransomware Recovery Fraud: When Incident Response Goes Wrong

764 Criminal Network Leader Sentenced: How Encrypted Platforms Enable Child Exploitation

DOJ Disrupts Chinese APT Flax Typhoon's Critical Infrastructure Campaign

Samsung Galaxy S26 Suffers Triple Breach at Pwn2Own Ireland 2026

Empire Market Takedown: 40-Year Sentence Marks New Era in Dark Web Enforcement

ASOS Breach Exposes Critical Gap in Third-Party Platform Security

Uranium Finance Hack: How $53M Was Stolen Through Smart Contract Exploits

Critical Cisco Nexus Vulnerabilities Enable Complete Switch Takeover

FakeGit Campaign Exploits 17,000+ GitHub Repositories to Distribute Malware

Midnight Mimosa Supply Chain Attack Turns Android Phones Into Malware Botnets

FBI Takes Down Chinese State-Sponsored Hacking Infrastructure Targeting Global Critical Infrastructure

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed. Has your question changed with it?

Contain the Blast Radius

The threat landscape has changed.
Has your question changed with it?