STRUCTURED THREAT INTELLIGENCE FOR THE CLOUD COMMUNITY

Aviatrix Threat Research Center

Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.

The Aviatrix Threat Research Center provides security teams with:

A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
What attackers exploited, and which enforcement gaps let them move.
Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.

Kill Chain Coverage

ATT&CK Mapped

Real-World IOCs

Threat ReportsLive Intelligence

Recent Breaches, Security Incidents & Vulnerabilities

A unified view of real-world cloud threats — combining AI-powered analysis, security research, and expert perspectives through a consistent, cloud-specific framework.

AI-Powered Threat Analysis

Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.

Browse by Industry

Accounting Aerospace Aerospace/Aviation Agriculture Airlines/Aviation Animation Apparel/Fashion Architecture/Planning Artificial Intelligence Artificial Intelligence/Machine Learning Arts/Crafts Automotive Aviation/Aerospace Banking/Mortgage Biotechnology/Greentech Blockchain/Cryptocurrency Broadcast Media Broadcasting Media Broadcasting/Media Building Materials Business Supplies/Equipment Capital Markets/Hedge Fund/Private Equity Chemical Chemicals Civic/Social Organization Civil Engineering Cloud Computing Cloud Computing/SaaS Cloud Native Security Fabric (CNSF)Cloud Services Commercial Facilities Commercial Real Estate Computer Games Computer Hardware Computer Networking Computer Software/Engineering Computer/Network Security Construction Consulting Consumer Electronics Consumer Goods Consumer Services Cosmetics Cosmetics Critical Manufacturing Cryptocurrencies Cryptocurrency Customer Services Cybersecurity Dairy Dating/Personal Services Dating/Social Platforms Defense/Space Design E-Learning Education Management Electrical/Electronic Manufacturing Emergency Services Energy Energy/Oil/Solar/Greentech Entertainment/Movie Production Environmental Services Events Services Executive Office Facilities Services Farming Fashion/Apparel Financial Services Fine Art Fishery Food Production Food/Beverages Fortune 500 companies Franchising Fundraising Gambling/Casinos Gaming Gaming/Casinos Government Administration Government Facilities Government Relations Graphic Design/Web Design Health Care / Life Sciences Healthcare Higher Education/Acadamia Hospitality Hospitals Human Resources/HR Import/Export Individual/Family Services Industrial Automation Information Services Information Technology/IT Insurance International Affairs International Trade/Development Internet Investment Banking/Venture Investment Management/Hedge Fund/Private Equity Judicial Judiciary Law Enforcement Law Practice/Law Firms Legal Services Legislative Office Leisure/Travel Logistics/Procurement Luxury Goods/Jewelry Machinery Management Consulting Manufacturing Maritime Market Research Marketing/Advertising/Sales Mechanical or Industrial Engineering Media Production Medical Equipment Medical Practice Military Industry Mining/Metals Mobile Museums/Institutions Music Newspapers/Journalism Non-Profit/Volunteering Oil/Energy/Solar/Greentech Online Publishing Outsourcing/Offshoring Package/Freight Delivery Parking Pharmaceuticals Philanthropy Photography Plastics Political Organization Primary/Secondary Education Professional Services Professional Training Public Relations/PR Public Safety Publishing Industry Railroad Manufacture Real Estate/Mortgage Recreational Facilities/Services Religious Institutions Renewables/Environment Research Industry Restaurants Retail Industry Robotics Rural Healthcare Security/Investigations Semiconductors Shipbuilding Social Media/Internet Sporting Goods Sports Staffing/Recruiting Supermarkets Technology Technology/IT Telecommunications Think Tanks Toys and Games Transportation Travel/Tourism Trucking/Freight Utilities Venture Capital/VC Warehousing Water and Waste Management Water and Wastewater Water and Wastewater Systems Water and Wastewater Treatment Water Treatment Water, Waste, Steam, and Air Conditioning Services Water/Waste Management Water/Wastewater Water/Wastewater Management Water/Wastewater/Utilities Wholesale Wine/Spirits Wireless Writing/Editing

Displaying 4561 to 4572 of 6939 threat reports

Financial Services8 months ago

Deepfake Injection Attacks: A Growing Threat to Identity Verification in 2025

In 2025, the financial sector faced a significant surge in deepfake and injection attacks targeting identity verification processes. Fraudsters utilized AI-generated media to impersonate individuals during onboarding and authentication, leading to unauthorized access and substantial financial losses. Notably, a multinational firm in Singapore was nearly defrauded of $500,000 when attackers used deepfake video avatars to impersonate company executives during a Zoom call. ([regulaforensics.com](https://regulaforensics.com/blog/identity-verification-incidents-2025/?utm_source=openai)) This incident underscores the escalating threat posed by deepfake technologies in compromising identity verification systems. The increasing sophistication and accessibility of AI tools have enabled attackers to bypass traditional security measures, highlighting the urgent need for enhanced detection and prevention strategies.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Computer Software/Engineering8 months ago

Alabama Man's Cyber Extortion Scheme Exposes Vulnerabilities in Social Media Security

Between April 2022 and May 2025, Jamarcus Mosley, a 22-year-old from Mobile, Alabama, orchestrated a cyber extortion scheme targeting hundreds of young women, including minors, across the United States. By impersonating friends and acquaintances, Mosley deceived victims into providing account recovery codes, enabling him to hijack their Snapchat and Instagram accounts. He then accessed private, intimate images and videos, threatening to publicly release the content unless victims complied with his demands for additional explicit material or monetary payments. This operation spanned multiple states, with documented cases in Georgia, Florida, and Illinois. ([justice.gov](https://www.justice.gov/usao-ndga/pr/online-predator-pleads-guilty-hacking-social-media-accounts-and-extorting-hundreds?utm_source=openai)) The case underscores the growing threat of social engineering attacks and the exploitation of personal relationships in the digital age. As individuals increasingly share personal content online, the risk of such intimate data being weaponized by malicious actors rises. This incident serves as a stark reminder of the importance of digital literacy, robust security practices, and the need for vigilance in online interactions to prevent similar breaches.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Financial Services8 months ago

Phishing Campaign Exploits Fake Google Security Page and PWA to Steal Credentials

In March 2026, a sophisticated phishing campaign emerged, utilizing a counterfeit Google Account security page to deploy a malicious Progressive Web App (PWA). This app deceived users into granting permissions that enabled the theft of one-time passcodes, cryptocurrency wallet addresses, and other sensitive data. Additionally, the malware transformed victims' browsers into proxies for attacker traffic, facilitating further network exploitation. The attackers employed the domain google-prism[.]com to mimic legitimate Google services, leading users through a deceptive setup process that included installing the harmful PWA and, in some cases, a companion Android application. This incident underscores the evolving tactics of cybercriminals who exploit trusted platforms and social engineering to bypass traditional security measures. The use of PWAs in phishing attacks highlights the need for heightened vigilance and the adoption of advanced security protocols to protect against such sophisticated threats.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(medium)

Read report

Computer Software/Engineering8 months ago

North Korean Hackers Exploit npm Packages in 2026 Supply Chain Attack

In March 2026, North Korean state-sponsored hackers launched a sophisticated supply chain attack by publishing 26 malicious npm packages disguised as developer tools. These packages utilized steganography to extract command-and-control (C2) URLs from seemingly benign Pastebin content, ultimately deploying a cross-platform remote access trojan (RAT) targeting developers. The C2 infrastructure was hosted on Vercel across 31 deployments, enabling the attackers to execute commands, exfiltrate sensitive data, and maintain persistent access to compromised systems. This incident underscores the evolving tactics of threat actors in exploiting trusted open-source ecosystems to infiltrate developer environments. The use of steganography and multi-stage payload delivery highlights the increasing complexity of supply chain attacks, emphasizing the need for enhanced vigilance and security measures within the software development community.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(medium)

Read report

Government Administration8 months ago

APT28's Exploitation of MSHTML Zero-Day Vulnerability in February 2026

In early 2026, the Russian state-sponsored threat actor APT28 exploited a zero-day vulnerability, CVE-2026-21513, in the MSHTML Framework. This high-severity flaw allowed attackers to bypass security features by convincing users to open malicious HTML or shortcut files, leading to potential code execution. The exploitation occurred before Microsoft's February 2026 Patch Tuesday, which subsequently addressed the vulnerability. ([thehackernews.com](https://thehackernews.com/2026/03/apt28-tied-to-cve-2026-21513-mshtml-0.html?utm_source=openai)) The incident underscores the persistent threat posed by state-sponsored actors leveraging zero-day vulnerabilities. Organizations are reminded of the critical importance of timely patch management and user education to mitigate risks associated with such sophisticated attacks.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Oil/Energy/Solar/Greentech8 months ago

Escalation of Iranian Cyber Attacks Post-2026 Military Strikes

In response to the joint U.S.-Israeli military strikes on February 28, 2026, Iranian-affiliated cyber actors have intensified their operations targeting U.S. critical infrastructure. Utilizing tactics such as brute force attacks, password spraying, and exploitation of unpatched vulnerabilities, these actors aim to disrupt services and exfiltrate sensitive data. Notably, sectors including energy, defense, and public health have reported increased intrusion attempts, with some incidents leading to operational disruptions and data breaches. This escalation underscores the persistent cyber threat posed by Iranian state-sponsored and aligned groups, even amidst kinetic military engagements. Organizations are urged to bolster their cybersecurity postures, as the likelihood of retaliatory cyber operations remains high, potentially leading to significant operational and reputational impacts.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Telecommunications8 months ago

Odido 2026 Data Breach: A Case Study in Social Engineering Vulnerabilities

In February 2026, Dutch telecommunications provider Odido experienced a significant data breach orchestrated by the cybercriminal group ShinyHunters. The attackers employed sophisticated social engineering tactics, including phishing emails and impersonation of IT staff, to gain unauthorized access to Odido's customer relationship management system. This breach resulted in the exposure of sensitive personal information of approximately 6.2 million customers, encompassing names, addresses, phone numbers, email addresses, dates of birth, customer numbers, bank account numbers, and identification details. Notably, passwords, call records, and billing information remained uncompromised. The incident stands as one of the largest private data leaks in Dutch history, highlighting critical vulnerabilities in data security practices within the telecommunications sector. ([cybernews.com](https://cybernews.com/security/odido-hackers-phishing-attack/?utm_source=openai)) This breach underscores the escalating threat posed by social engineering attacks targeting customer service systems. The incident serves as a stark reminder for organizations to bolster their cybersecurity measures, particularly in safeguarding customer data against increasingly sophisticated attack vectors. ([cybernews.com](https://cybernews.com/security/odido-hackers-phishing-attack/?utm_source=openai))

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Computer Software/Engineering8 months ago

Understanding the Google Gemini 2025 Prompt Injection Vulnerability

In mid-2025, security researchers identified a significant vulnerability in Google's AI assistant, Gemini, integrated into Gmail and other Workspace applications. This flaw, known as 'prompt injection,' allowed attackers to embed hidden instructions within emails using HTML and CSS techniques, such as invisible text. When Gemini processed these emails to generate summaries, it executed the concealed commands, potentially leading to deceptive summaries that could mislead users into divulging sensitive information or performing unintended actions. The exploitation of this vulnerability posed substantial risks, including unauthorized access to user data and increased susceptibility to phishing attacks. ([techradar.com](https://www.techradar.com/pro/security/google-gemini-can-be-hijacked-to-display-fake-email-summaries-in-phishing-scams?utm_source=openai)) The discovery of this vulnerability underscores the evolving nature of cyber threats targeting AI-driven platforms. As AI assistants become more integrated into daily workflows, they present new attack vectors that traditional security measures may not fully address. This incident highlights the critical need for continuous monitoring and updating of AI systems to safeguard against emerging threats and to maintain user trust in these technologies.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Financial Services8 months ago

Understanding the 2026 RTF Malware Delivery Exploit

In early 2026, cybersecurity researchers identified a sophisticated malware delivery method exploiting Rich Text Format (RTF) files. Attackers embedded malicious ZIP files within RTF documents, which, when opened, executed embedded scripts to download and install malware on the victim's system. This technique bypassed traditional security measures by leveraging the inherent trust in RTF files and the complexity of detecting embedded compressed files. The campaign targeted various sectors, leading to data breaches and operational disruptions. This incident underscores the evolving tactics of cyber adversaries who continuously adapt to circumvent security defenses. The use of RTF files for malware delivery highlights the need for organizations to enhance their email filtering, user awareness training, and endpoint detection capabilities to mitigate such threats.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Computer Software/Engineering8 months ago

Chrome's 2026 WebView Vulnerability: A Cautionary Tale of Malicious Extensions

In January 2026, a high-severity vulnerability (CVE-2026-0628) was discovered in Google Chrome's WebView component, allowing attackers to exploit insufficient policy enforcement. By convincing users to install malicious extensions, attackers could inject scripts or HTML into privileged pages, potentially leading to unauthorized data access and system compromise. Google promptly addressed this issue by releasing Chrome version 143.0.7499.192, mitigating the risk posed by this flaw. ([thehackerwire.com](https://www.thehackerwire.com/vulnerability/CVE-2026-0628/?utm_source=openai)) This incident underscores the critical importance of vigilant extension management and prompt software updates. The exploitation of browser vulnerabilities through malicious extensions highlights the evolving tactics of cyber adversaries, emphasizing the need for continuous monitoring and robust security practices to protect sensitive information.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(low)

Read report

Computer Software/Engineering8 months ago

LLM-Assisted Deanonymization: A New Era of Online Privacy Challenges

In February 2026, researchers from ETH Zurich and Anthropic demonstrated that large language models (LLMs) can effectively deanonymize pseudonymous online users by analyzing unstructured text data. Their method involved extracting identity-relevant features from anonymous posts, searching for candidate matches via semantic embeddings, and reasoning over top candidates to verify matches. This approach achieved up to 68% recall at 90% precision, significantly outperforming traditional methods. The study highlights the diminishing effectiveness of online pseudonymity and raises concerns about privacy and data protection in the digital age. ([arxiv.org](https://arxiv.org/abs/2602.16800?utm_source=openai)) This research underscores the urgent need for enhanced privacy measures and regulatory frameworks to protect individuals' online identities. As LLMs become more sophisticated, the potential for misuse in deanonymizing users poses significant risks, necessitating proactive strategies to safeguard personal information.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Financial Services8 months ago

AI-Enhanced Reconnaissance: Adapting to the New Cyber Threat Landscape

In 2026, cyber adversaries have increasingly leveraged AI-enhanced reconnaissance techniques to conduct 'silent probing' campaigns. These operations involve prolonged, subtle monitoring of organizational defenses to map detection thresholds, response times, and operational routines. By analyzing defender behaviors over time, attackers can tailor subsequent attacks to evade detection and maximize impact. This shift from targeting technical vulnerabilities to exploiting behavioral patterns has led to more sophisticated and successful breaches, underscoring the need for adaptive and unpredictable defense strategies. The rise of AI-driven reconnaissance signifies a paradigm shift in cyber threats, emphasizing the importance of behavioral analysis in security postures. Organizations must now contend with adversaries who can learn and adapt to their defensive measures, making traditional, static security protocols insufficient. This evolution necessitates a reevaluation of incident response strategies to incorporate dynamic and behavior-based defense mechanisms.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

1...379 380 381 382 383...579

Security Research & Insights

Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs

All Research Articles

exec-13ea3b13-c046-4c3f-bdef-bfc6448ce51d

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Matt Snyder

Oct 26, 202610 min read

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

Matt Snyder

Oct 21, 202613 min read

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Matt Snyder

Oct 21, 202615 min read

Market Perspectives

Market Perspectives offering expert commentary and select breach analysis from industry leaders

Read All Blogs

What Could Have Stopped the 2023 MGM Breach v4

Cloud Native Security Fabric

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

Cloud Network Security

John Qian

Jul 31, 20257 min read

Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

Scott Leatherman

Jul 23, 202512 min read

Cloud Network Security

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

Tom Davis

Jun 25, 20257 min read

How CNSF Protects Cloud Workloads

Cloud attackers don’t rely on a single exploit — they rely on paths.

Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.

Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.

With CNSF, enterprises can:

Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.

See Your Attack Paths. Close the Gaps with CNSF.

Blast radius starts where your enforcement stops.

Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.

The Executive Assistant That Broke the Company Why Shadow AI is the New Cloud Crisis card image

Your assessment delivers:

The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.

Explore the Workload Attack Path Assessment

Containment Era Intelligence

The threat landscape has changed.
Has your question changed with it?

In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.

Interactive ToolOpen Threat Command Center Quick AssessmentAssess My Blast Radius

Tracked Campaigns

82%

Intrusions are malware-free

— CrowdStrike GTR 2026

29 min

Avg. eCrime breakout time

— CrowdStrike GTR 2026

27 sec

Fastest observed breakout

— CrowdStrike GTR 2026

This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.

Contain the Blast Radius

See the attack paths already present in your environment — and where CNSF containment controls would break them.

Free Containment Assessment Under Active Attack?

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Deepfake Injection Attacks: A Growing Threat to Identity Verification in 2025

Alabama Man's Cyber Extortion Scheme Exposes Vulnerabilities in Social Media Security

Phishing Campaign Exploits Fake Google Security Page and PWA to Steal Credentials

North Korean Hackers Exploit npm Packages in 2026 Supply Chain Attack

APT28's Exploitation of MSHTML Zero-Day Vulnerability in February 2026

Escalation of Iranian Cyber Attacks Post-2026 Military Strikes

Odido 2026 Data Breach: A Case Study in Social Engineering Vulnerabilities

Understanding the Google Gemini 2025 Prompt Injection Vulnerability

Understanding the 2026 RTF Malware Delivery Exploit

Chrome's 2026 WebView Vulnerability: A Cautionary Tale of Malicious Extensions

LLM-Assisted Deanonymization: A New Era of Online Privacy Challenges

AI-Enhanced Reconnaissance: Adapting to the New Cyber Threat Landscape

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed.
Has your question changed with it?

Contain the Blast Radius

Products

By Role

Customer Stories

Solutions

Resources

Industry

Company

Tools

Security & Legal

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Deepfake Injection Attacks: A Growing Threat to Identity Verification in 2025

Alabama Man's Cyber Extortion Scheme Exposes Vulnerabilities in Social Media Security

Phishing Campaign Exploits Fake Google Security Page and PWA to Steal Credentials

North Korean Hackers Exploit npm Packages in 2026 Supply Chain Attack

APT28's Exploitation of MSHTML Zero-Day Vulnerability in February 2026

Escalation of Iranian Cyber Attacks Post-2026 Military Strikes

Odido 2026 Data Breach: A Case Study in Social Engineering Vulnerabilities

Understanding the Google Gemini 2025 Prompt Injection Vulnerability

Understanding the 2026 RTF Malware Delivery Exploit

Chrome's 2026 WebView Vulnerability: A Cautionary Tale of Malicious Extensions

LLM-Assisted Deanonymization: A New Era of Online Privacy Challenges

AI-Enhanced Reconnaissance: Adapting to the New Cyber Threat Landscape

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed. Has your question changed with it?

Contain the Blast Radius

The threat landscape has changed.
Has your question changed with it?