STRUCTURED THREAT INTELLIGENCE FOR THE CLOUD COMMUNITY

Aviatrix Threat Research Center

Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.

The Aviatrix Threat Research Center provides security teams with:

A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
What attackers exploited, and which enforcement gaps let them move.
Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.

Kill Chain Coverage

ATT&CK Mapped

Real-World IOCs

Threat ReportsLive Intelligence

Recent Breaches, Security Incidents & Vulnerabilities

A unified view of real-world cloud threats — combining AI-powered analysis, security research, and expert perspectives through a consistent, cloud-specific framework.

AI-Powered Threat Analysis

Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.

Browse by Industry

Accounting Aerospace Aerospace/Aviation Agriculture Airlines/Aviation Animation Apparel/Fashion Architecture/Planning Artificial Intelligence Artificial Intelligence/Machine Learning Arts/Crafts Automotive Aviation/Aerospace Banking/Mortgage Biotechnology/Greentech Blockchain/Cryptocurrency Broadcast Media Broadcasting Media Broadcasting/Media Building Materials Business Supplies/Equipment Capital Markets/Hedge Fund/Private Equity Chemical Chemicals Civic/Social Organization Civil Engineering Cloud Computing Cloud Computing/SaaS Cloud Native Security Fabric (CNSF)Cloud Services Commercial Facilities Commercial Real Estate Computer Games Computer Hardware Computer Networking Computer Software/Engineering Computer/Network Security Construction Consulting Consumer Electronics Consumer Goods Consumer Services Cosmetics Cosmetics Critical Manufacturing Cryptocurrencies Cryptocurrency Customer Services Cybersecurity Dairy Dating/Personal Services Dating/Social Platforms Defense/Space Design E-Learning Education Management Electrical/Electronic Manufacturing Emergency Services Energy Energy/Oil/Solar/Greentech Entertainment/Movie Production Environmental Services Events Services Executive Office Facilities Services Farming Fashion/Apparel Financial Services Fine Art Fishery Food Production Food/Beverages Fortune 500 companies Franchising Fundraising Gambling/Casinos Gaming Gaming/Casinos Government Administration Government Facilities Government Relations Graphic Design/Web Design Health Care / Life Sciences Healthcare Higher Education/Acadamia Hospitality Hospitals Human Resources/HR Import/Export Individual/Family Services Industrial Automation Information Services Information Technology/IT Insurance International Affairs International Trade/Development Internet Investment Banking/Venture Investment Management/Hedge Fund/Private Equity Judicial Judiciary Law Enforcement Law Practice/Law Firms Legal Services Legislative Office Leisure/Travel Logistics/Procurement Luxury Goods/Jewelry Machinery Management Consulting Manufacturing Maritime Market Research Marketing/Advertising/Sales Mechanical or Industrial Engineering Media Production Medical Equipment Medical Practice Military Industry Mining/Metals Mobile Museums/Institutions Music Newspapers/Journalism Non-Profit/Volunteering Oil/Energy/Solar/Greentech Online Publishing Outsourcing/Offshoring Package/Freight Delivery Parking Pharmaceuticals Philanthropy Photography Plastics Political Organization Primary/Secondary Education Professional Services Professional Training Public Relations/PR Public Safety Publishing Industry Railroad Manufacture Real Estate/Mortgage Recreational Facilities/Services Religious Institutions Renewables/Environment Research Industry Restaurants Retail Industry Robotics Rural Healthcare Security/Investigations Semiconductors Shipbuilding Social Media/Internet Sporting Goods Sports Staffing/Recruiting Supermarkets Technology Technology/IT Telecommunications Think Tanks Toys and Games Transportation Travel/Tourism Trucking/Freight Utilities Venture Capital/VC Warehousing Water and Waste Management Water and Wastewater Water and Wastewater Systems Water and Wastewater Treatment Water Treatment Water, Waste, Steam, and Air Conditioning Services Water/Waste Management Water/Wastewater Water/Wastewater Management Water/Wastewater/Utilities Wholesale Wine/Spirits Wireless Writing/Editing

Displaying 589 to 600 of 6838 threat reports

Information Technology/IT1 month ago

Apple's CVE-2026-86950 Zero-Day Reveals Critical Enterprise Security Gaps

Apple disclosed CVE-2026-86950, a zero-day vulnerability in its CoreGraphics framework with a CVSS score of 8.8, actively exploited in highly sophisticated targeted attacks against specific individuals. The out-of-bounds write flaw affects a broad range of Apple devices including iPhones from iPhone 11 onward and multiple iPad generations, allowing attackers to execute arbitrary code through memory corruption. CISA immediately added the vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies patch within three days and conduct forensic triage by October 2, 2026. This incident highlights the growing trend of advanced persistent threat actors investing heavily in Apple device exploitation chains, moving beyond the traditional view of Apple products as inherently secure endpoints in enterprise environments.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(low)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Airlines/Aviation1 month ago

Critical Infrastructure Under Siege: ATNS Ransomware Attack Exposes Aviation OT Vulnerabilities

In September 2026, South Africa's Air Traffic and Navigation Services (ATNS) discovered ransomware-linked malware in operational technology networks supporting weather services for air traffic control systems managing 10% of global airspace. The attack affected facilities at Port Elizabeth Airport and potentially East London Airport, with preliminary investigations revealing data exfiltration to external IP addresses located in China. While internal teams implemented containment measures and malware removal, ATNS issued a request for comprehensive cyber-forensic investigation services to determine the full extent of compromise and remaining risks. This incident highlights the accelerating threat landscape targeting critical aviation infrastructure, with ransomware attacks on the aviation sector surging sixfold in 2025. The targeting of air traffic control systems represents a concerning escalation in attacks against operational technology environments that directly impact public safety and global transportation networks.

High impact

Kill Chain

ICInitial Compromise(medium)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

Financial Services1 month ago

CVE-2026-88772: Critical Citrix NetScaler Vulnerability Under Active Exploitation

Citrix NetScaler ADC and Gateway devices are under active exploitation through CVE-2026-88772, a critical memory overflow vulnerability in DTLS protocol handling that allows pre-authentication remote code execution. Attackers exploit parsing inconsistencies in the fragment_length field to craft malicious records that appear small but contain oversized data, causing buffer overflows that can be weaponized for arbitrary shellcode execution with root privileges. The vulnerability affects the NetScaler Packet Processing Engine and has been added to CISA's Known Exploited Vulnerabilities catalog due to confirmed active exploitation in the wild. This incident highlights the continued targeting of network infrastructure devices, particularly load balancers and VPN gateways that sit at critical network perimeters. With organizations increasingly dependent on hybrid connectivity and secure remote access, vulnerabilities in these edge devices represent high-value targets for threat actors seeking initial network compromise and lateral movement capabilities.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Telecommunications1 month ago

Critical OpenSSL DTLS Vulnerability Exposes Heap Memory in Encrypted Communications

OpenSSL disclosed CVE-2026-84782, a high-severity vulnerability in DTLS (Datagram Transport Layer Security) that can leak heap memory unencrypted or crash applications. The flaw occurs when DTLS handshake message resends trigger while larger messages are partially transmitted, causing wrong message labels and potential buffer overruns. Fixed in OpenSSL 4.0.3, 3.6.5, 3.5.9, and 3.4.8, the vulnerability affects all prior versions across multiple branches, with older versions requiring premium support for patches. This vulnerability highlights the ongoing risks in foundational cryptographic libraries that secure internet communications, particularly as organizations increasingly rely on encrypted protocols for WebRTC, VoIP, and real-time communications across hybrid and multi-cloud environments.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(low)

EExfiltration(high)

IImpact(high)

Read report

Utilities1 month ago

Critical Infrastructure Under Siege: Lantronix G520 Gateway Vulnerabilities Expose Global Risk

In September 2026, CISA disclosed critical vulnerabilities (CVE-2026-84409 and CVE-2026-91191) affecting Lantronix G520 Series Cellular Gateways used in critical infrastructure worldwide. CVE-2026-84409 involves cross-site scripting through unencrypted update metadata retrieval, while CVE-2026-91191 stems from improper cryptographic signature verification where the production private key was exposed in the SDK. These vulnerabilities allow attackers to execute arbitrary code with root privileges, compromising devices deployed across transportation, energy, and water systems globally. These vulnerabilities highlight the growing threat to industrial control systems as cellular gateways become prime targets for nation-state actors and ransomware groups seeking to disrupt critical infrastructure operations.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(low)

Read report

Government Administration1 month ago

Apple CVE-2026-86950 Added to CISA KEV Catalog: Critical Out-of-Bounds Write Vulnerability Under Active Exploitation

CISA has added CVE-2026-86950, an Apple Multiple Products Out-of-Bounds Write Vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. This critical vulnerability affects multiple Apple products and allows attackers to execute arbitrary code through out-of-bounds memory write operations. The vulnerability poses significant risks to federal enterprises and organizations using Apple devices, as successful exploitation can grant attackers total control of compromised systems. CISA's Binding Operational Directive (BOD) 26-04 requires federal agencies to prioritize rapid remediation of KEV vulnerabilities on publicly exposed assets. This incident highlights the ongoing trend of memory corruption vulnerabilities being actively exploited against Apple ecosystems, emphasizing the critical importance of timely patch management across enterprise device fleets as threat actors increasingly target platform-specific weaknesses.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(low)

Read report

Government Administration1 month ago

Critical NetScaler Exploitation Campaign Uses Advanced WHIPSHOT and SLAPSHOT Malware

In September 2026, multiple threat actors exploited critical vulnerabilities CVE-2026-88772 and CVE-2026-88771 in Citrix NetScaler ADC and Gateway appliances to compromise dozens of organizations across North America and Europe. The attacks targeted government, financial services, technology, education, and legal sectors by bypassing authentication to establish root-level access through memory overflow bugs in the DTLS protocol handling. Attackers deployed sophisticated post-exploitation toolkits including WHIPSHOT web shells that disguise Base64-encoded commands within HTTP headers, and SLAPSHOT Python tunnelers for internal reconnaissance and credential theft, enabling lateral movement and persistent access to victim networks. This campaign highlights the evolving threat landscape where edge infrastructure devices remain prime targets due to their internet exposure and position outside traditional endpoint protection coverage. With over 42,000 potentially vulnerable NetScaler instances globally and multiple threat actor groups actively exploiting these flaws for botnet recruitment and access brokering, organizations face immediate risks to their perimeter security and internal networks.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(medium)

IImpact(medium)

Read report

Oil/Energy/Solar/Greentech1 month ago

Critical Vulnerabilities in Toptech TMS7 and TopHAT Threaten Global Critical Infrastructure

CISA disclosed critical vulnerabilities in Toptech Systems' TMS7 and TopHAT industrial control systems affecting version 7.6.3, with the most severe vulnerability (CVE-2026-71379) scoring a perfect CVSS 10.0. The vulnerabilities include unauthenticated database access, unrestricted file uploads, multiple SQL injection flaws, session fixation, eval injection, and cross-site scripting. These systems are deployed worldwide across critical infrastructure sectors including energy, chemical, and transportation. Successful exploitation could allow attackers to access critical data, execute arbitrary code, and compromise entire industrial networks. This disclosure highlights the growing cybersecurity risks facing industrial control systems as critical infrastructure becomes increasingly digitized and interconnected, making them attractive targets for nation-state actors and cybercriminals seeking to disrupt essential services.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(medium)

Read report

Transportation1 month ago

Critical Cloud Misconfigurations Expose Transportation IoT Platform: Viidure Dashcam Security Analysis

In September 2026, CISA disclosed critical vulnerabilities in Viidure's Dashcam Android Application affecting versions up to 3.3.1.260403. Two severe flaws were identified: CVE-2026-94204, a cloud storage misconfiguration with public-read permissions exposing all user data and system files globally, and CVE-2026-96587, hardcoded credentials embedded in the application code providing full platform access. The vulnerabilities achieved CVSS scores of 7.5 and 10.0 respectively, with potential for complete platform compromise including unauthorized access to live dashcam footage, user records, firmware files, and critical system operations. Viidure failed to respond to CISA's coordination attempts, leaving users without vendor-provided remediation. This incident highlights the growing threat of cloud misconfigurations in IoT ecosystems, particularly as connected vehicle technologies proliferate across transportation infrastructure. The combination of exposed cloud storage and embedded credentials represents a concerning pattern in mobile application security that threatens critical infrastructure sectors.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(medium)

Read report

Information Technology/IT1 month ago

CSuite Phishing Campaign Demonstrates Evolution of Executive-Targeted Cyber Attacks

In September 2026, ANY.RUN researchers identified a sophisticated CSuite phishing campaign targeting U.S. executives and C-suite personnel across 351 analyzed incidents. The operation used convincing business lures mimicking Adobe, DocuSign, Zoom, and Microsoft 365 services to deliver dual-payload attacks. Attackers deployed both credential harvesting mechanisms to steal Microsoft 365 sessions and remote management tools like ScreenConnect and Action1 for persistent endpoint access. The campaign primarily affected technology, manufacturing, government, and consulting sectors, with 51% of incidents originating in the United States. This incident highlights the evolving threat landscape where attackers increasingly combine identity theft with endpoint compromise to maximize impact. As organizations adopt hybrid work models and cloud-first strategies, these multi-vector attacks exploit the expanded attack surface between email systems and remote access infrastructure, making traditional perimeter defenses insufficient against modern business email compromise schemes.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(medium)

IImpact(high)

Read report

Financial Services1 month ago

The Browser Battlefield: Six Attack Techniques Reshaping Cybersecurity in 2026

Browser-based attacks have emerged as the predominant threat vector in 2026, with most breaches now originating within browser sessions rather than traditional network perimeters. Cybercriminals are exploiting the browser's privileged position as the primary interface for business applications, executing complete attack chains from initial access to data exfiltration without ever leaving the browser environment. These sophisticated attacks leverage advanced techniques including malicious browser extensions, DOM manipulation, credential harvesting through fake authentication portals, and abuse of legitimate browser APIs to maintain persistence and evade detection. The rise of browser-centric attacks reflects the broader shift toward cloud-first architectures and remote work models, making traditional network-based security controls less effective against threats that operate within trusted user sessions and legitimate application contexts.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(medium)

Read report

Public Safety1 month ago

Critical VIVOTEK Camera Vulnerability Exposes Infrastructure to Remote Takeover

A critical command injection vulnerability (CVE-2026-22755) with a CVSS score of 10.0 has been discovered in VIVOTEK camera firmware affecting 38+ camera models across V Series, C Series, S Series, Dome, Panoramic, and Bullet product lines. The vulnerability allows remote attackers to achieve command execution with root privileges on affected devices without authentication, leading to complete system compromise. CISA published this advisory after discovering a public proof of concept exploit, indicating the vulnerability is actively exploitable in the wild. VIVOTEK has released firmware updates to address the issue and recommends immediate patching of all affected camera systems. This vulnerability affects critical infrastructure sectors including government facilities, transportation systems, energy, and financial services deployed worldwide, with VIVOTEK being a Taiwan-based manufacturer of network surveillance equipment.

Critical impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

1...48 49 50 51 52...570

Security Research & Insights

Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs

All Research Articles

exec-13ea3b13-c046-4c3f-bdef-bfc6448ce51d

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Matt Snyder

Oct 26, 202610 min read

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

Matt Snyder

Oct 21, 202613 min read

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Matt Snyder

Oct 21, 202615 min read

Market Perspectives

Market Perspectives offering expert commentary and select breach analysis from industry leaders

Read All Blogs

What Could Have Stopped the 2023 MGM Breach v4

Cloud Native Security Fabric

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

Cloud Network Security

John Qian

Jul 31, 20257 min read

Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

Scott Leatherman

Jul 23, 202512 min read

Cloud Network Security

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

Tom Davis

Jun 25, 20257 min read

How CNSF Protects Cloud Workloads

Cloud attackers don’t rely on a single exploit — they rely on paths.

Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.

Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.

With CNSF, enterprises can:

Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.

See Your Attack Paths. Close the Gaps with CNSF.

Blast radius starts where your enforcement stops.

Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.

The Executive Assistant That Broke the Company Why Shadow AI is the New Cloud Crisis card image

Your assessment delivers:

The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.

Explore the Workload Attack Path Assessment

Containment Era Intelligence

The threat landscape has changed.
Has your question changed with it?

In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.

Interactive ToolOpen Threat Command Center Quick AssessmentAssess My Blast Radius

Tracked Campaigns

82%

Intrusions are malware-free

— CrowdStrike GTR 2026

29 min

Avg. eCrime breakout time

— CrowdStrike GTR 2026

27 sec

Fastest observed breakout

— CrowdStrike GTR 2026

This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.

Contain the Blast Radius

See the attack paths already present in your environment — and where CNSF containment controls would break them.

Free Containment Assessment Under Active Attack?

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Apple's CVE-2026-86950 Zero-Day Reveals Critical Enterprise Security Gaps

Critical Infrastructure Under Siege: ATNS Ransomware Attack Exposes Aviation OT Vulnerabilities

CVE-2026-88772: Critical Citrix NetScaler Vulnerability Under Active Exploitation

Critical OpenSSL DTLS Vulnerability Exposes Heap Memory in Encrypted Communications

Critical Infrastructure Under Siege: Lantronix G520 Gateway Vulnerabilities Expose Global Risk

Apple CVE-2026-86950 Added to CISA KEV Catalog: Critical Out-of-Bounds Write Vulnerability Under Active Exploitation

Critical NetScaler Exploitation Campaign Uses Advanced WHIPSHOT and SLAPSHOT Malware

Critical Vulnerabilities in Toptech TMS7 and TopHAT Threaten Global Critical Infrastructure

Critical Cloud Misconfigurations Expose Transportation IoT Platform: Viidure Dashcam Security Analysis

CSuite Phishing Campaign Demonstrates Evolution of Executive-Targeted Cyber Attacks

The Browser Battlefield: Six Attack Techniques Reshaping Cybersecurity in 2026

Critical VIVOTEK Camera Vulnerability Exposes Infrastructure to Remote Takeover

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed.
Has your question changed with it?

Contain the Blast Radius

Products

By Role

Customer Stories

Solutions

Resources

Industry

Company

Tools

Security & Legal

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Apple's CVE-2026-86950 Zero-Day Reveals Critical Enterprise Security Gaps

Critical Infrastructure Under Siege: ATNS Ransomware Attack Exposes Aviation OT Vulnerabilities

CVE-2026-88772: Critical Citrix NetScaler Vulnerability Under Active Exploitation

Critical OpenSSL DTLS Vulnerability Exposes Heap Memory in Encrypted Communications

Critical Infrastructure Under Siege: Lantronix G520 Gateway Vulnerabilities Expose Global Risk

Apple CVE-2026-86950 Added to CISA KEV Catalog: Critical Out-of-Bounds Write Vulnerability Under Active Exploitation

Critical NetScaler Exploitation Campaign Uses Advanced WHIPSHOT and SLAPSHOT Malware

Critical Vulnerabilities in Toptech TMS7 and TopHAT Threaten Global Critical Infrastructure

Critical Cloud Misconfigurations Expose Transportation IoT Platform: Viidure Dashcam Security Analysis

CSuite Phishing Campaign Demonstrates Evolution of Executive-Targeted Cyber Attacks

The Browser Battlefield: Six Attack Techniques Reshaping Cybersecurity in 2026

Critical VIVOTEK Camera Vulnerability Exposes Infrastructure to Remote Takeover

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed. Has your question changed with it?

Contain the Blast Radius

The threat landscape has changed.
Has your question changed with it?