STRUCTURED THREAT INTELLIGENCE FOR THE CLOUD COMMUNITY

Aviatrix Threat Research Center

Cloud breaches are accelerating — across identities, workloads, supply chains, and cloud-native services. In the Containment Era, understanding how a breach unfolds is how you architect to stop it.

The Aviatrix Threat Research Center provides security teams with:

A structured understanding of how breaches unfold — kill chain, ATT&CK techniques, CVEs, and IOCs in a consistent format.
What attackers exploited, and which enforcement gaps let them move.
Where workload-level controls would have broken the attack chain — including paths that posture tools and endpoint detection don't model.

Kill Chain Coverage

ATT&CK Mapped

Real-World IOCs

Threat ReportsLive Intelligence

Recent Breaches, Security Incidents & Vulnerabilities

A unified view of real-world cloud threats — combining AI-powered analysis, security research, and expert perspectives through a consistent, cloud-specific framework.

AI-Powered Threat Analysis

Agentic AI that analyzes real-world attacks — across security incidents, breaches, and exploited vulnerabilities — to produce structured, actionable intelligence.

Browse by Industry

Accounting Aerospace Aerospace/Aviation Agriculture Airlines/Aviation Animation Apparel/Fashion Architecture/Planning Artificial Intelligence Artificial Intelligence/Machine Learning Arts/Crafts Automotive Aviation/Aerospace Banking/Mortgage Biotechnology/Greentech Blockchain/Cryptocurrency Broadcast Media Broadcasting Media Broadcasting/Media Building Materials Business Supplies/Equipment Capital Markets/Hedge Fund/Private Equity Chemical Chemicals Civic/Social Organization Civil Engineering Cloud Computing Cloud Computing/SaaS Cloud Native Security Fabric (CNSF)Cloud Services Commercial Facilities Commercial Real Estate Computer Games Computer Hardware Computer Networking Computer Software/Engineering Computer/Network Security Construction Consulting Consumer Electronics Consumer Goods Consumer Services Cosmetics Cosmetics Critical Manufacturing Cryptocurrencies Cryptocurrency Customer Services Cybersecurity Dairy Dating/Personal Services Dating/Social Platforms Defense/Space Design E-Learning Education Management Electrical/Electronic Manufacturing Emergency Services Energy Energy/Oil/Solar/Greentech Entertainment/Movie Production Environmental Services Events Services Executive Office Facilities Services Farming Fashion/Apparel Financial Services Fine Art Fishery Food Production Food/Beverages Fortune 500 companies Franchising Fundraising Gambling/Casinos Gaming Gaming/Casinos Government Administration Government Facilities Government Relations Graphic Design/Web Design Health Care / Life Sciences Healthcare Higher Education/Acadamia Hospitality Hospitals Human Resources/HR Import/Export Individual/Family Services Industrial Automation Information Services Information Technology/IT Insurance International Affairs International Trade/Development Internet Investment Banking/Venture Investment Management/Hedge Fund/Private Equity Judicial Judiciary Law Enforcement Law Practice/Law Firms Legal Services Legislative Office Leisure/Travel Logistics/Procurement Luxury Goods/Jewelry Machinery Management Consulting Manufacturing Maritime Market Research Marketing/Advertising/Sales Mechanical or Industrial Engineering Media Production Medical Equipment Medical Practice Military Industry Mining/Metals Mobile Museums/Institutions Music Newspapers/Journalism Non-Profit/Volunteering Oil/Energy/Solar/Greentech Online Publishing Outsourcing/Offshoring Package/Freight Delivery Parking Pharmaceuticals Philanthropy Photography Plastics Political Organization Primary/Secondary Education Professional Services Professional Training Public Relations/PR Public Safety Publishing Industry Railroad Manufacture Real Estate/Mortgage Recreational Facilities/Services Religious Institutions Renewables/Environment Research Industry Restaurants Retail Industry Robotics Rural Healthcare Security/Investigations Semiconductors Shipbuilding Social Media/Internet Sporting Goods Sports Staffing/Recruiting Supermarkets Technology Technology/IT Telecommunications Think Tanks Toys and Games Transportation Travel/Tourism Trucking/Freight Utilities Venture Capital/VC Warehousing Water and Waste Management Water and Wastewater Water and Wastewater Systems Water and Wastewater Treatment Water Treatment Water, Waste, Steam, and Air Conditioning Services Water/Waste Management Water/Wastewater Water/Wastewater Management Water/Wastewater/Utilities Wholesale Wine/Spirits Wireless Writing/Editing

Displaying 1177 to 1188 of 6868 threat reports

Entertainment/Movie Production2 months ago

Critical Plex Security Update: Multiple Vulnerabilities Patched in September 2026

In September 2026, Plex urged users to immediately update their Media Server and Desktop applications following the discovery of multiple undisclosed security vulnerabilities. The streaming media service released patches in Plex Media Server version 1.43.3 and Plex Desktop 1.115.0, with CVE identifiers requested for the flaws. While technical details remain undisclosed, this follows a pattern of critical Plex vulnerabilities, including a high-severity authentication bypass flaw (CVE-2025-34158) patched in August 2025 that exposed server owner credentials to any authenticated user. This incident highlights the ongoing security challenges facing media streaming infrastructure, particularly as threat actors increasingly target home and small business servers. With over 360,000 Plex servers exposed to the internet and a history of exploitation including the 2022 LastPass breach chain, these vulnerabilities underscore the critical need for rapid patch deployment and network segmentation.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Computer Software/Engineering2 months ago

Mass WordPress Plugin Exploitation: 440,000 Attacks Target Critical RCE Flaws

In July-August 2026, threat actors launched widespread exploitation campaigns targeting critical remote code execution vulnerabilities in two popular WordPress plugins: Super Forms (CVE-2026-14894, CVSS 9.8) and Elementor Pro (CVE-2026-32475, CVSS 9.0-9.8). Both flaws allow unauthenticated attackers to upload malicious PHP files through missing file type validation, enabling complete site takeover. Wordfence blocked over 440,000 exploit attempts across both vulnerabilities, with attackers deploying web shells like "Mushr00w_upl.php" to establish persistent access and exfiltrate data. The mass exploitation demonstrates the continued threat to web applications through plugin vulnerabilities. These attacks highlight the accelerating pace of WordPress plugin exploitation in 2026, as threat actors increasingly target content management systems to gain initial access for broader campaigns including ransomware deployment and data theft operations.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(low)

C&CCommand & Control(high)

EExfiltration(medium)

IImpact(medium)

Read report

Industrial Automation2 months ago

Critical Configuration Flaw Exposed in Inductive Automation Ignition SCADA Platform

In September 2026, CISA disclosed CVE-2026-77393 affecting Inductive Automation's Ignition SCADA platform versions 8.1.53 and earlier. The vulnerability stems from incorrect default permissions where the Gateway's 'Create Project Role(s)' setting shipped blank, allowing any authenticated user to create projects if they could execute gateway scripts. This configuration flaw exposed industrial control systems to potential unauthorized project creation and manipulation. Inductive Automation addressed the issue in version 8.1.54 by restricting project creation to Designer sessions and eliminating reliance on the problematic setting. This incident highlights the growing security challenges facing industrial control systems as they become increasingly connected and targeted by threat actors. With critical infrastructure under constant threat and new regulations emphasizing OT security, even seemingly minor configuration vulnerabilities can create significant exposure points for manufacturing and energy sector organizations.

Medium impact

Kill Chain

ICInitial Compromise(medium)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(low)

IImpact(low)

Read report

Oil/Energy/Solar/Greentech2 months ago

CVE-2026-77477 Exposes Critical Privilege Escalation Risk in OPC UA Infrastructure

CVE-2026-77477 affects OPCFoundation OPC UA LocalDiscoveryServer (LDS) installations prior to version 1.04.420, allowing attackers to intercept high-privilege console windows during installation. The vulnerability enables execution of arbitrary commands with elevated privileges when an attacker has physical or remote desktop access during the installation process. This impacts critical infrastructure sectors including chemical, energy, food and agriculture, and manufacturing worldwide, with a CVSS score of 4.6 (Medium severity). This vulnerability highlights the growing security challenges in industrial control systems and OT environments, where installation-time privilege escalation can provide attackers with persistent access to critical infrastructure components.

Low impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(low)

IImpact(low)

Read report

Automotive2 months ago

Ted Backdoor Reveals Critical Gap in Load Balancer Security

In September 2026, North Korean state-sponsored actors deployed a sophisticated backdoor called 'Ted' by compromising HAProxy load balancers at two South Korean organizations in the automotive and media sectors. The attackers replaced legitimate HAProxy binaries with trojanized versions containing embedded malware that intercepted web traffic and served altered pages to selected visitors. The implant operated covertly by handling command-and-control requests without reaching backend servers, erasing traces from connection logs and statistics. The attack toolkit included additional trojans targeting system binaries like sshd and crond, along with a companion remote access trojan called curlRAT that maintained persistent access to compromised systems. This incident highlights the evolving sophistication of supply chain attacks where legitimate infrastructure components are weaponized to establish persistent footholds in critical networks. The attack demonstrates advanced techniques for traffic manipulation and steganographic communication that bypass traditional security controls focused on network perimeter defense.

High impact

Kill Chain

ICInitial Compromise(medium)

PEPrivilege Escalation(high)

LMLateral Movement(high)

C&CCommand & Control(high)

EExfiltration(high)

IImpact(high)

Read report

Oil/Energy/Solar/Greentech2 months ago

CVE-2025-10478: Rockwell Automation ICS Module Vulnerability Threatens Critical Infrastructure

A critical denial-of-service vulnerability (CVE-2025-10478) has been discovered in Rockwell Automation's 1756-ENBT ControlLogix EtherNet/IP bridge modules, affecting all versions deployed across critical infrastructure sectors worldwide. Attackers can exploit this flaw by sending crafted CIP packets to crash the module, requiring a manual restart to restore operations. The vulnerability impacts manufacturing, food and agriculture, transportation, and water treatment facilities that rely on these industrial control systems for operational continuity. This incident highlights the growing threat landscape targeting industrial control systems as critical infrastructure becomes increasingly digitized and interconnected. The vulnerability demonstrates how network-accessible ICS components remain vulnerable to simple but effective attacks that can disrupt essential services.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(low)

IImpact(high)

Read report

Banking/Mortgage2 months ago

PostgreSQL's 12-Year Security Blind Spot: CVE-2026-6471 Exposes Critical Database Infrastructure Risks

PostgreSQL disclosed CVE-2026-6471, a critical 12-year-old vulnerability in logical decoding that allows accounts with REPLICATION privileges to execute arbitrary code as the database server's operating system user. The flaw, present since PostgreSQL 9.4 in 2014, enables attackers to bypass existing security restrictions by loading malicious libraries through the CREATE_REPLICATION_SLOT command. Exploitation requires a replication account and wal_level=logical configuration, commonly found in backup tools, standby servers, and CDC pipelines. The vulnerability affects versions before 18.6, 17.11, 16.15, 15.19, and 14.24, with fixes introducing the output_plugin_libraries parameter to whitelist approved plugins. This incident highlights the growing threat to database infrastructure as organizations increasingly rely on distributed data architectures and replication mechanisms. With PostgreSQL powering critical applications across industries, this vulnerability exposes the risks of privilege escalation through seemingly low-privilege backup credentials, emphasizing the need for comprehensive database security controls and regular privilege audits.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(high)

EExfiltration(medium)

IImpact(medium)

Read report

Financial Services2 months ago

Massive Unicode Phishing Campaign Evades Email Filters Using Invisible Characters

A sophisticated phishing campaign identified by Microsoft in 2026 leveraged invisible Unicode tag characters to bypass email security filters while targeting millions of recipients with financial lures. The campaign, which peaked between February and May 2026, sent up to 2.37 million messages daily using AI-generated content distributed through the legitimate ActiveCampaign marketing platform. Attackers inserted invisible Unicode characters into financial keywords like 'funding' to evade detection while appearing normal to human recipients, demonstrating how AI-era evasion techniques are being adapted for traditional phishing campaigns. This incident highlights the evolving sophistication of email-based attacks in the AI era, where threat actors are exploiting legitimate marketing platforms and advanced obfuscation techniques to scale phishing operations at unprecedented volumes while evading traditional security controls.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(low)

C&CCommand & Control(high)

EExfiltration(medium)

IImpact(medium)

Read report

Information Technology/IT2 months ago

CVE-2026-28323: Critical SAML Bypass Exposes SolarWinds Help Desk Systems

CVE-2026-28323 is a critical SAML authentication bypass vulnerability in SolarWinds Web Help Desk versions 2026.1 and earlier, discovered in July 2026. Attackers can forge SAML responses and bypass login screens entirely without valid credentials, gaining administrative access to help desk systems. The vulnerability stems from conditional signature verification that only validates SAML responses when certificates are present, and accepts unsigned responses even when certificates are configured. With a CVSS score of 9.8, this flaw allows complete takeover of help desk systems containing sensitive corporate data and service tickets through a single HTTP request. This incident highlights the continued risks of legacy SAML implementations as organizations increasingly rely on federated identity for Zero Trust architectures, making proper SAML security validation more critical than ever.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(medium)

Read report

Financial Services2 months ago

ASCII Smuggling Crosses Over: How AI Attack Techniques Are Transforming Phishing

In February 2026, Microsoft researchers identified a large-scale phishing campaign that repurposed ASCII smuggling techniques originally developed for AI prompt injection attacks. The attackers used invisible Unicode tag characters (U+E0000-U+E007F) to split financial lure words like 'funding' within phishing emails, evading traditional email security filters that rely on keyword detection. The campaign peaked at over 2.3 million messages daily and operated through legitimate email marketing infrastructure, demonstrating how AI-era attack techniques are crossing over into traditional threat vectors. This incident highlights the evolving sophistication of phishing attacks as threat actors adapt cutting-edge evasion techniques originally designed for AI systems to bypass conventional email security defenses. The crossover represents a significant shift in the threat landscape where AI security research methods are being weaponized for traditional cybercrime.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(low)

LMLateral Movement(low)

C&CCommand & Control(medium)

EExfiltration(low)

IImpact(medium)

Read report

Computer Software/Engineering2 months ago

AI Coding Agents Become Attack Vectors: The 2026 Supply Chain Breach

In 2026, security researchers discovered a critical supply chain vulnerability affecting AI coding agents used by Fortune 500 companies and defense contractors. By scanning over 6,000 corporate domains, researchers found 120 llms.txt files pointing to unregistered code packages. When they registered these domains and hosted malicious packages, AI agents including Claude, OpenAI's Codex, and Nous Research's Hermes automatically downloaded and executed the code within hours, creating backdoors into corporate networks. The attack demonstrated how AI agents blindly trust vendor documentation without verification, treating it as ground truth and bypassing human oversight. This represents a new class of supply chain attack vector where autonomous AI systems become unwitting accomplices in corporate network compromise, similar to the SolarWinds incident but leveraging AI agent automation for broader impact.

High impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(medium)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(medium)

IImpact(low)

Read report

Government Administration2 months ago

AI-Powered Exploitation of Georgia Voting System Reveals Election Security Gaps

A previously disclosed vulnerability in voting systems used across 21 U.S. states, including Georgia, was exploited using AI tools during the May 2026 primary election to recover the chronological order of ballots cast. The attack required only publicly available data sources - early voting lists and cast-vote record (CVR) files - combined with AI coding agents to analyze voter behavior patterns. No direct access to voting machines, networks, or source code was necessary, demonstrating how AI amplifies the exploitation of known vulnerabilities in critical infrastructure. This incident highlights the growing intersection of AI capabilities with election security vulnerabilities, as threat actors increasingly leverage automated tools to exploit weaknesses in democratic processes and critical infrastructure systems.

Medium impact

Kill Chain

ICInitial Compromise(high)

PEPrivilege Escalation(high)

LMLateral Movement(medium)

C&CCommand & Control(medium)

EExfiltration(high)

IImpact(high)

Read report

1...97 98 99 100 101...573

Security Research & Insights

Security Research & Insights with human-led deep dives into campaigns and cloud-native TTPs

All Research Articles

exec-13ea3b13-c046-4c3f-bdef-bfc6448ce51d

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Matt Snyder

Oct 26, 202610 min read

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

Matt Snyder

Oct 21, 202613 min read

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Matt Snyder

Oct 21, 202615 min read

Market Perspectives

Market Perspectives offering expert commentary and select breach analysis from industry leaders

Read All Blogs

What Could Have Stopped the 2023 MGM Breach v4

Cloud Native Security Fabric

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

Cloud Network Security

John Qian

Jul 31, 20257 min read

Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

Scott Leatherman

Jul 23, 202512 min read

Cloud Network Security

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

Tom Davis

Jun 25, 20257 min read

How CNSF Protects Cloud Workloads

Cloud attackers don’t rely on a single exploit — they rely on paths.

Once inside, attackers move laterally between workloads, establish command-and-control through egress paths, and exfiltrate data through legitimate cloud services — often before detection tools generate an alert. These paths exist because most security architectures enforce at centralized inspection points, not at every workload. The paths that matter most are the ones that never reach a central firewall.

Aviatrix Cloud Native Security Fabric (CNSF) contains attacks by enforcing policy at every workload communication path — containing blast radius, blocking lateral movement, and cutting off egress before data leaves the environment.

With CNSF, enterprises can:

Contain attack paths at runtime
Gain visibility into east-west and egress workload communication and apply controls that limit lateral movement, unauthorized egress, and uncontrolled trust expansion.
Eliminate blind spots in workload-to-workload traffic
Observe traffic across VPCs/VNets, regions, and cloud providers using cloud native telemetry — including paths that posture tools and point controls don’t model.
Secure modern and AI-driven workloads
Understand how agents, services, and workloads communicate at runtime, and enforce policy to reduce the risk of misuse, over-privileged access, or unintended data flows.
Apply consistent Zero Trust controls without slowing teams
Enforce segmentation, egress control, and encryption centrally across clouds — without agents, application changes, or developer friction.

See Your Attack Paths. Close the Gaps with CNSF.

Blast radius starts where your enforcement stops.

Most security architectures enforce at centralized inspection points. Attackers move between workloads on paths that never reach those points — building blast radius invisibly until detection tools fire, often too late.

The Executive Assistant That Broke the Company Why Shadow AI is the New Cloud Crisis card image

Your assessment delivers:

The Aviatrix Workload Attack Path Assessment (WAPA) analyzes real workload communication using cloud native telemetry to uncover attack paths already present in your environment — and shows how Cloud Native Security Fabric (CNSF) can break those paths with runtime enforcement.

Explore the Workload Attack Path Assessment

Containment Era Intelligence

The threat landscape has changed.
Has your question changed with it?

In March 2026, TeamPCP proved that detection-first architectures cannot contain attacks that move through trusted code, not around defenses. Today’s threat actors don’t break in — they log in, blend in, and expand silently. This command center tracks the evolving threat landscape and helps you measure your Blast Radius — the architectural metric that defines resilience in the Containment Era.

Interactive ToolOpen Threat Command Center Quick AssessmentAssess My Blast Radius

Tracked Campaigns

82%

Intrusions are malware-free

— CrowdStrike GTR 2026

29 min

Avg. eCrime breakout time

— CrowdStrike GTR 2026

27 sec

Fastest observed breakout

— CrowdStrike GTR 2026

This command center tracks 8 active campaigns and measures your Blast Radius: what an attacker can reach once inside your environment.

Contain the Blast Radius

See the attack paths already present in your environment — and where CNSF containment controls would break them.

Free Containment Assessment Under Active Attack?

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Critical Plex Security Update: Multiple Vulnerabilities Patched in September 2026

Mass WordPress Plugin Exploitation: 440,000 Attacks Target Critical RCE Flaws

Critical Configuration Flaw Exposed in Inductive Automation Ignition SCADA Platform

CVE-2026-77477 Exposes Critical Privilege Escalation Risk in OPC UA Infrastructure

Ted Backdoor Reveals Critical Gap in Load Balancer Security

CVE-2025-10478: Rockwell Automation ICS Module Vulnerability Threatens Critical Infrastructure

PostgreSQL's 12-Year Security Blind Spot: CVE-2026-6471 Exposes Critical Database Infrastructure Risks

Massive Unicode Phishing Campaign Evades Email Filters Using Invisible Characters

CVE-2026-28323: Critical SAML Bypass Exposes SolarWinds Help Desk Systems

ASCII Smuggling Crosses Over: How AI Attack Techniques Are Transforming Phishing

AI Coding Agents Become Attack Vectors: The 2026 Supply Chain Breach

AI-Powered Exploitation of Georgia Voting System Reveals Election Security Gaps

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed.
Has your question changed with it?

Contain the Blast Radius

Products

By Role

Customer Stories

Solutions

Resources

Industry

Company

Tools

Security & Legal

Aviatrix Threat Research Center

Recent Breaches, Security Incidents & Vulnerabilities

AI-Powered Threat Analysis

Critical Plex Security Update: Multiple Vulnerabilities Patched in September 2026

Mass WordPress Plugin Exploitation: 440,000 Attacks Target Critical RCE Flaws

Critical Configuration Flaw Exposed in Inductive Automation Ignition SCADA Platform

CVE-2026-77477 Exposes Critical Privilege Escalation Risk in OPC UA Infrastructure

Ted Backdoor Reveals Critical Gap in Load Balancer Security

CVE-2025-10478: Rockwell Automation ICS Module Vulnerability Threatens Critical Infrastructure

PostgreSQL's 12-Year Security Blind Spot: CVE-2026-6471 Exposes Critical Database Infrastructure Risks

Massive Unicode Phishing Campaign Evades Email Filters Using Invisible Characters

CVE-2026-28323: Critical SAML Bypass Exposes SolarWinds Help Desk Systems

ASCII Smuggling Crosses Over: How AI Attack Techniques Are Transforming Phishing

AI Coding Agents Become Attack Vectors: The 2026 Supply Chain Breach

AI-Powered Exploitation of Georgia Voting System Reveals Election Security Gaps

Security Research & Insights

Four Minutes to PHP2Shell Shaped Traffic: What an Internet Exposed PHP Honeypot Saw

Eight Certificates That Can Impersonate Anyone: The eMudhra Key Failure and Your Real Attack Surface

php2shell: Two Critical PHP RCEs, a Pre-Patch Leak, and the PHP You Didn't Know You Had

Market Perspectives

What Could Have Stopped the 2023 MGM Breach? A Study in the Power of Embedded Zero Trust

The Zero Trust Gap: Only 8% of US Enterprises Use Zero Trust Architectures

HITRUST CSF Compliance in the Cloud—How Aviatrix Secures Healthcare Data

How CNSF Protects Cloud Workloads

With CNSF, enterprises can:

See Your Attack Paths. Close the Gaps with CNSF.

Your assessment delivers:

The threat landscape has changed. Has your question changed with it?

Contain the Blast Radius

The threat landscape has changed.
Has your question changed with it?