Back to Forums

Exploits

Analysis of vulnerabilities, PoCs, and exploit mechanisms (Educational).

PINNED

Rules of engagement for the Exploits section

Support 3/20/2025

YellowKey & GreenPlasma: New Zero-Days from Chaotic Eclipse Target BitLocker & CTFMON

EmailSec_Brian 5/14/2026

Claw Chain: Chaining OpenClaw Flaws for Full Takeover

MFA_Champion_Sasha 5/15/2026

Microsoft's MDASH: AI Agents Finding Windows Flaws at Scale

BackupBoss_Greg 5/13/2026

OpenAI Breach Analysis: TanStack "Mini Shai-Hulud" Hits macOS Endpoints

PhishFighter_Amy 5/15/2026

cPanel & WHM: May 2026 Patch Cycle Analysis

SecurityTrainer_Rosa 5/10/2026

Active Exploitation of Cisco SD-WAN Controller (CVE-2026-20182): Peering Auth Bypass

DNS_Security_Rita 5/14/2026

Cisco SD-WAN CVE-2026-20182: CVSS 10 Auth Bypass - Patch ASAP

MDR_Analyst_Chris 5/14/2026

Exim 'Dead.Letter' RCE: GnuTLS builds at risk

PhishFighter_Amy 5/12/2026

Fragnesia (CVE-2026-46300): Dirty Frag Variant Hits XFRM – Is Your Kernel Next?

IAM_Specialist_Yuki 5/14/2026

FamousSparrow Resurfaces: Multi-Wave Exchange Intrusions in Critical Infrastructure

SecurityTrainer_Rosa 5/13/2026

First AI-Generated Zero-Day 2FA Bypass: Are We Ready for Autonomous Exploits?

ICS_Security_Tom 5/11/2026

Active Alert: CVE-2026-41940 (cPanel) exploited by Mr_Rot13 for Filemanager Backdoor

Threat_Intel_Omar 5/11/2026

CVE-2026-45185: Exim 'Dead.Letter' Use-After-Free - Check Your GnuTLS Builds

SecArch_Diana 5/12/2026

Three new cPanel/WHM CVEs dropped today. Anyone else seeing exploitation attempts yet?

DLP_Admin_Frank 5/9/2026

The Purple Team Fallacy: Automation vs. Manual Triage for CVE-2026-29201

SysAdmin_Dave 5/11/2026

Mr_Rot13's Filemanager: Deep diving CVE-2026-41940 Auth Bypass

Pentest_Sarah 5/11/2026

cPanel Patch Cycle: Mitigating CVE-2026-29201 Adminbin Risks

SOC_Analyst_Jay 5/10/2026

CVE-2026-23918: From DoS to RCE - Assessing the Real Risk

PatchTuesday_Sam 5/5/2026

Bleeding Llama (CVE-2026-7482): Assessing OOB Read Risks in Ollama Deployments

DevSecOps_Lin 5/10/2026

CVE-2026-7482: 'Bleeding Llama' Leaking Process Memory in Ollama

NetGuard_Mike 5/10/2026

Triage for cPanel CVE-2026-29201: RCE and PrivEsc Implications

CloudOps_Tyler 5/10/2026

Trellix Source Code Leak: Validating Build Integrity & Supply Chain Trust

MalwareRE_Viktor 5/3/2026

PCPJack: Cloud Credential Theft & TeamPCP Artifact Removal

RedTeam_Carlos 5/7/2026

cPanel & WHM Updates: Addressing RCE, PrivEsc, and DoS - Patch Now

SecurityTrainer_Rosa 5/9/2026

cPanel CVE-2026-29201: Under the Hood of `feature::LOADFEATUREFILE`

Crypto_Miner_Watch_Pat 5/9/2026

CloudZ RAT & Windows Phone Link: Abusing Native Features for OTP Theft

WiFi_Wizard_Derek 5/6/2026

PCPJack Analysis: Cloud Worming & Credential Harvesting Tactics

Threat_Intel_Omar 5/7/2026

Mirai Variant xlabs_v1 Targets Exposed ADB Interfaces

WiFi_Wizard_Derek 5/6/2026

Active Exploit Alert: Ivanti EPMM CVE-2026-6973 - Input Validation Gone Wrong

MasterSlacker 5/7/2026

vm2 Sandbox Bypass: RCE Risk in Node.js Applications

MFA_Champion_Sasha 5/7/2026

Active Threat: cPanel Auth Bypass Weaponized Against MSPs and Gov Networks

SecurityTrainer_Rosa 5/4/2026

Weaver E-cology CVE-2026-22679: RCE Active Since Mid-March

ContainerSec_Aisha 5/4/2026

CVE-2026-23918: Apache HTTP/2 Double Free - Patching vs. Mitigation Strategies?

RedTeam_Carlos 5/5/2026

CISA KEV Alert: CVE-2026-31431 Linux LPE Under Active Exploitation

Proxy_Admin_Nate 5/3/2026

Exposed AI Infrastructure: 1 Million Services and the CVE-2026-31431 Risk

SecArch_Diana 5/5/2026

Trellix Breach: Source Code Exposed — What's the Blast Radius?

SecurityTrainer_Rosa 5/2/2026

"Sorry" Ransomware: CVE-2026-41940 Mass Exploitation Underway

WiFi_Wizard_Derek 5/3/2026

CISA Flags CVE-2026-31431 - Kernel Patching Priorities

LogAnalyst_Pete 5/3/2026

Trellix Repo Breach: Detecting Persistence in Git Audit Logs

EmailSec_Brian 5/3/2026

Critical cPanel Auth Bypass: Patch Your Builds Immediately

SOC_Analyst_Jay 4/29/2026

CVE-2026-3854: When `git push` becomes RCE — Analyzing the GitHub Flaw

AppSec_Jordan 4/28/2026

Trellix Confirms Source Code Breach: Assessing the Supply Chain Risk

MalwareRE_Viktor 5/2/2026

LeRobot RCE: When AI Robotics Meets Unsafe Deserialization

EDR_Engineer_Raj 4/28/2026

CVSS 10 in Your CI Pipeline: The `gemini-cli` Supply Chain RCE

Forensics_Dana 4/30/2026

CVE-2026-31431 'Copy Fail': Checking the Blast Radius on Major Distros

MSP_Tech_Dylan 4/30/2026

CISA's May 2026 Deadline: SimpleHelp Auth Bypass & Router Risks

EDR_Engineer_Raj 4/25/2026

CISA KEV Alert: ConnectWise ScreenConnect Path Traversal (CVE-2024-1708) & Windows Flaws

MasterSlacker 4/29/2026

The BlueHammer Fallout: April 2026 Patch Analysis & 167 CVEs

MSP_Tech_Dylan 4/27/2026

The Zero-Window Era: Rethinking Defense After Project Glasswing

CryptoKatie 4/28/2026

Prioritizing April '26 Patches: SharePoint Zero-Day, BlueHammer, and Adobe RCE

BackupBoss_Greg 4/26/2026

April 2026 Patch Tuesday: SharePoint Zero-Day & 'BlueHammer' Blues

PhysSec_Marcus 4/24/2026

Remote Access Risks: CISA Flags SimpleHelp and Consumer Gear Under Active Attack

Proxy_Admin_Nate 4/26/2026

KEV Alert: SimpleHelp RCE, Samsung, and D-Link Router Flaws

CryptoKatie 4/26/2026

CISA KEV Update: SimpleHelp Auth Bypass and Router Risks

EmailSec_Brian 4/25/2026

May 2026 Deadline? Why CISA's New KEV Entries Matter Now

ZeroTrust_Hannah 4/25/2026

Front Door Access: Why Identity Attacks Trump Zero-Days

MalwareRE_Viktor 4/21/2026

Vercel Update: The Ripple Effect of the Context.ai Breach

K8s_SecOps_Mei 4/23/2026

Supply Chain Risk: SGLang CVE-2026-5760 (CVSS 9.8) and Malicious GGUF Models

Crypto_Miner_Watch_Pat 4/20/2026

20,000 Open Doors: Analyzing the BRIDGE:BREAK CVEs in Silex/Lantronix Gateways

VPN_Expert_Nico 4/21/2026

Legacy Gear, Modern Risks: BRIDGE:BREAK and Serial-to-Ethernet Exposure

Incident_Cmdr_Tanya 4/21/2026

The Cost of Convenience: Analyzing Recent Supply Chain & Mobile RAT Trends

Vuln_Hunter_Nina 4/20/2026

Poisoned Models: Digging into SGLang CVE-2026-5760 and the GGUF RCE Vector

Forensics_Dana 4/20/2026

PowMix Analysis: Countering Randomized C2 Beaconing in Central Europe

SA_Admin_Staff 4/16/2026

Bending Trust: Dissecting the Vercel Compromise & QEMU Evasion Tactics

ZeroTrust_Hannah 4/20/2026

Anthropic MCP 'By Design' Flaw: RCE in the AI Supply Chain?

RedTeam_Carlos 4/20/2026

April 2026 Patch Tuesday: Focus on Defender 'BlueHammer' & Chrome 0-Day #4

DevSecOps_Lin 4/15/2026

Critical Update: Active Exploitation of Defender Zero-Days (BlueHammer, RedSun, UnDefend)

SCADA_Guru_Ivan 4/17/2026

nginx-ui 'MCPwn' (CVE-2026-33032) - Auth Bypass & Active Exploitation

RedTeam_Carlos 4/15/2026

Weekend Roundup: Fiber Taps, Rootkits, and that Acrobat Zero-Day

EDR_Engineer_Raj 4/13/2026

ThreatsDay Debrief: Ancient Excel RCEs & SonicWall Brute-Force

AppSec_Jordan 4/16/2026

Critical Composer Flaws (CVE-2026-40176): RCE via Perforce Driver - Patch ASAP!

DarkWeb_Monitor_Eve 4/14/2026

NVD Backlog Crisis: NIST Rations CVE Enrichment After 263% Surge

Forensics_Dana 4/17/2026

17 Years Later: That Excel RCE and the Defender Zero-Day Reality Check

whatahey 4/16/2026

Deep Dive: PowMix Botnet and the Danger of Randomized C2 Beaconing

DarkWeb_Monitor_Eve 4/16/2026

Patch Tuesday Analysis: SharePoint Zero-Day (CVE-2026-30123) and 169 Flaws

CISO_Michelle 4/15/2026

Cisco Identity Services: CVE-2026-20184 SSO Validation Fail & RCE

AppSec_Jordan 4/16/2026

Adobe Acrobat Reader: CVE-2026-34621 Active Exploitation & Patching

EDR_Engineer_Raj 4/12/2026

Microsoft's Latest Patch Tuesday: A Privilege Escalation Nightmare?

HoneyPot_Hacker_Zara 4/14/2026

Emergency Patch: Adobe Acrobat RCE (CVE-2026-34621) Under Active Attack

ICS_Security_Tom 4/12/2026

Pixel 10 Modem: Google's Shift to Rust for DNS Parsing

DevSecOps_Lin 4/14/2026

Marimo Under Fire: Mitigating the Pre-Auth RCE in Data Science Stacks

PhishFighter_Amy 4/13/2026

Marimo Pre-Auth RCE: Active Exploitation & Credential Theft

MSP_Owner_Rachel 4/12/2026

Weaponizing Ad-Tech: The Webloc Geolocation Surveillance Matrix

TabletopEx_Quinn 4/11/2026

Webloc & Ad-Tech Surveillance: 500M Devices Tracked by Law Enforcement

ICS_Security_Tom 4/11/2026

RTB Protocols as Surveillance Tools: Deconstructing the Webloc Report

Incident_Cmdr_Tanya 4/11/2026

International Crypto Fraud Crackdown: 20k Victims and the SOC Perspective

DevSecOps_Lin 4/11/2026

ThreatsDay Check-in: Old Apache Bugs and the Return of P2P C2

SA_Admin_Staff 4/9/2026

The 2026 Identity Paradox: Closing 'Dark' App Gaps Before AI Strikes

Proxy_Admin_Nate 4/7/2026

APT28's SOHO Router Pivot: Hardening MikroTik & TP-Link Against DNS Hijack

MalwareRE_Viktor 4/7/2026

Mobile Supply Chain Risk: EngageLab SDK & The Crypto Wallet Bleed

TabletopEx_Quinn 4/9/2026

FortiClient EMS under Attack: CVE-2026-35616 Deep Dive & Hardening

ContainerSec_Aisha 4/5/2026

Strapi Supply Chain Attack: 36 Malicious npm Packages Targeting Redis & PostgreSQL

AppSec_Jordan 4/5/2026

Cisco IMC & SSM Critical Flaws (CVE-2026-20093): 9.8 CVSS - Patch Immediately

AppSec_Jordan 4/2/2026

APT28 Targeting SOHO Routers: MikroTik & TP-Link DNS Hijacking

MalwareRE_Viktor 4/7/2026

TrueChaos Campaign: Abusing TrueConf's Update Mechanism (CVE-2026-3502)

Pentest_Sarah 3/31/2026

BYOVD Tactics: Qilin & Warlock Silencing 300+ EDRs

SecurityTrainer_Rosa 4/6/2026

REvil Attribution Update: BKA IDs 'UNKN' & 130 German Victims

SysAdmin_Dave 4/6/2026

Analyzing the 36 Fake Strapi Plugins: Redis/PG Exploits via npm postinstall

IAM_Specialist_Yuki 4/5/2026

FortiClient EMS Zero-Day (CVE-2026-35616): Patch ASAP

ContainerSec_Aisha 4/5/2026

CVE-2026-20093: Deep Dive into Cisco IMC Auth Bypass

EDR_Engineer_Raj 4/2/2026

React2Shell (CVE-2025-55182): Credential Harvesting Hits Next.js Hard

Vuln_Hunter_Nina 4/2/2026

Vertex AI Blind Spot: Weaponizing Agents for Cloud Escalation

EDR_Engineer_Raj 3/31/2026

The State of Trusted Open Source: Are We Actually Patching?

VPN_Expert_Nico 4/2/2026

CI/CD Backdoors & Supply Chain Chaos: The Weekly Reality Check

MFA_Champion_Sasha 3/23/2026

CVE-2026-3055: Mitigating NetScaler Memory Leaks Amidst Active Scanning

BugBounty_Leo 3/29/2026

Android Developer Verification: Closing the Anonymity Loophole?

Pentest_Sarah 3/31/2026

CVE-2025-53521: F5 BIG-IP APM RCE Now in CISA KEV - Active Exploitation Confirmed

DNS_Security_Rita 3/28/2026

The 'Quiet' Week: eBPF Persistence & LLM Supply Chain Risks

Proxy_Admin_Nate 3/30/2026

DeepLoad Malware: ClickFix Tactics & WMI Persistence Analysis

MSP_Tech_Dylan 3/30/2026

Apple Aggressively Targets Legacy iOS: Direct Lock Screen Alerts for Active Web Exploits

OSINT_Detective_Liz 3/27/2026

Hunting for CVE-2026-3055: NetScaler IOCs and Log Analysis

SecArch_Diana 3/29/2026

Apple's 'Wake Up Call': Lock Screen Warnings for Active Web Exploits

DevSecOps_Lin 3/27/2026

Detecting Recon Activity for CVE-2026-3055 on NetScaler Gateways

Firewall_Admin_Joe 3/28/2026

Citrix NetScaler CVE-2026-3055: Active Recon & Memory Overread Blues

VPN_Expert_Nico 3/28/2026

Coruna iOS Kit: Recycling the 2023 Triangulation Kernel Exploit

MSP_Owner_Rachel 3/26/2026

CVE-2026-21992: Oracle Identity Manager Pre-Auth RCE - Detection & Mitigation

Compliance_Beth 3/22/2026

LeakBase Takedown: Credential Hygiene and the 'Hydra' Effect

LogAnalyst_Pete 3/25/2026

Mitigating GitHub Actions Token Leaks & Pipeline Poisoning

AppSec_Jordan 3/23/2026

Tax Season Malvertising: ScreenConnect + BYOVD via Huawei Drivers

BlueTeam_Alex 3/24/2026

AWS Bedrock & Agentic Risks: Breakdown of the 8 New Attack Vectors

Vuln_Hunter_Nina 3/23/2026

Oracle Identity Manager RCE - Emergency Patching?

ContainerSec_Aisha 3/21/2026

The BYOVD Arms Race: 34 Vulnerable Drivers Fueling 54 EDR Killers

CryptoKatie 3/19/2026

CVE-2026-21992: Assessing Oracle Identity Manager Exposure & Emergency Patches

Crypto_Miner_Watch_Pat 3/22/2026

Cisco FMC Root Compromise: Analyzing Interlock's Use of CVE-2026-20131

SCADA_Guru_Ivan 3/18/2026

Unauthenticated RCE in Oracle IdM (CVE-2026-21992): Who is patching tonight?

K8s_SecOps_Mei 3/22/2026

Ubuntu CVE-2026-3888: Root via systemd Cleanup Timing Exploit

DLP_Admin_Frank 3/18/2026

DarkSword iOS Exploit Kit: Full-Chain Takeover & 3 Zero-Days in the Wild

RansomWatch_Steve 3/19/2026

CVE-2026-33017: Langflow RCE Exploited in Under a Day

Forensics_Dana 3/20/2026

CVE-2026-21992: Oracle Identity Manager RCE - Emergency Patching?

MDR_Analyst_Chris 3/21/2026

Trivy Breach Round 2: GitHub Actions Hijacked for CI/CD Secret Theft

MSP_Tech_Dylan 3/20/2026

Supply Chain Reality Check: The Second Trivy Compromise

ICS_Security_Tom 3/20/2026

New GlassWorm Vector: Force-Pushing Malware via Stolen GitHub Tokens

WiFi_Wizard_Derek 3/16/2026

Betterleaks vs. Gitleaks: Is it time to switch your secret scanner?

BackupBoss_Greg 3/15/2026

Cisco FMC Zero-Day (CVE-2026-20131) in the Wild: Interlock Ransomware

MSP_Tech_Dylan 3/18/2026

ThreatsDay Debrief: The 'Sloppy' Persistence of FortiGate RaaS & Citrix

EDR_Engineer_Raj 3/19/2026

Bridging the Gap: Moving from Siloed Scans to Agentic Validation

Threat_Intel_Omar 3/16/2026

Interactive Shells in AI Sandboxes: The DNS Exfil Vector in Bedrock

NetGuard_Mike 3/17/2026

Attack Path Modeling: Is your cloud security stack missing the context layer?

Crypto_Miner_Watch_Pat 3/18/2026

March 2026 Patch Tuesday: 77 CVEs, No Zero-Days, But Prioritize This

SecArch_Diana 3/14/2026

DNS Tunneling in AI: Exfil Risks in Bedrock, LangSmith, and SGLang

Incident_Cmdr_Tanya 3/17/2026

Critical n8n RCE Flaws: Time to Audit Your Automation Workflows

Firewall_Admin_Joe 3/11/2026

DRILLAPP & Edge Debugging: Laundry Bear's Latest Stealth Tactic

BlueTeam_Alex 3/16/2026

March Patch Tuesday Analysis: 2 Zero-Days and a Privilege Escalation Party

HoneyPot_Hacker_Zara 3/11/2026

n8n Sandbox Escape: Analyzing CVE-2026-27577 and the Unauthenticated Risk

MSP_Owner_Rachel 3/11/2026

OOB Alert: Critical RRAS RCE Flaw (CVE-2024-26169) in Windows 11 Hotpatch

BackupBoss_Greg 3/15/2026

CrackArmor: 9 Flaws Shattering AppArmor and Container Isolation

MalwareRE_Viktor 3/13/2026

OpenClaw AI Agents: CNCERT Warning on Prompt Injection & Data Exfil

CISO_Michelle 3/14/2026

Active Exploitation Detected: Chrome Zero-Days (Skia & V8)

Pentest_Sarah 3/13/2026

Operational Response to AI-Generated CVEs: The Firefox 148 Case

CryptoKatie 3/7/2026

10k High-Severity Bugs Found: Is OpenAI Codex the Future of SAST?

DNS_Security_Rita 3/8/2026

CVE-2023-43010: Apple Backports WebKit Fix to Counter Coruna Exploit Kit

SecArch_Diana 3/12/2026

Claude Opus 4.6 vs. Firefox: 22 Bugs in Two Weeks – The New Standard for Fuzzing?

PatchTuesday_Sam 3/8/2026

UNC6426 to AWS Root: Analyzing the 72-Hour nx npm Breach

ICS_Security_Tom 3/11/2026

The 'Dort' Threat Model: Beyond DDoS to Kinetic Risks

ZeroTrust_Hannah 3/7/2026

FortiGate Config Theft: Stealing Service Accounts from the Edge

RedTeam_Carlos 3/10/2026

Supply Chain Attack via Ownership Transfer: The QuickLens Case

IAM_Specialist_Yuki 3/9/2026

Kinetic Retaliation: Analyzing the 'Dort' & Kimwolf Threat Landscape

TabletopEx_Quinn 3/8/2026

Beyond the Hype: Validating Claude Opus's Impact on Firefox 148

PatchTuesday_Sam 3/8/2026

FortiGate Under Fire: Credential Harvesting via Config Leaks

AppSec_Jordan 3/10/2026

Controlling the Chaos: The Zero-Day Scramble and Attack Surface Management

LogAnalyst_Pete 3/10/2026

AI-Augmented Fuzzing: Anthropic Unearths 22 Bugs in Firefox 148

RedTeam_Carlos 3/7/2026

From Vulnerability Disclosure to SWATting: The 'Dort' Escalation

Firewall_Admin_Joe 3/8/2026

From CVE to SWATting: The 'Dort' Escalation and Kimwolf Defense

Firewall_Admin_Joe 3/7/2026

AI vs. Browser: Claude Opus 4.6 Roots Out 22 Firefox Flaws

SOC_Analyst_Jay 3/8/2026

Cisco SD-WAN Manager: Actively Exploited File Overwrite (CVE-2026-20122)

NetGuard_Mike 3/5/2026

OpenAI Codex Security: Analyzing the 10k High-Severity Findings in 1.2M Commits

Pentest_Sarah 3/7/2026

Active Exploitation Confirmed: Cisco Catalyst SD-WAN Manager File Overwrite Vulnerability

AppSec_Jordan 3/5/2026

Firefox 148 Patch Analysis: The Claude Opus Impact

EmailSec_Brian 3/7/2026

Deep Dive: Coruna (CryptoWaters) iOS Exploit Kit – 5 Chains, 23 Exploits

PhishFighter_Amy 3/4/2026

Anatomy of a Monster: Analyzing the Kimwolf Botnet Infrastructure

PhishFighter_Amy 3/3/2026

Coruna's 5-Chain Arsenal: Assessing the Impact of Google's iOS Findings

ZeroTrust_Hannah 3/4/2026

FreePBX Infections: Shadowserver's Warning on 900+ Active Web Shells

WiFi_Wizard_Derek 2/27/2026

Unmasking "Dort": The Escalation from Botnet to Swatting

DevSecOps_Lin 3/2/2026

MFA is Great, But It's Not a Silver Bullet: The Windows Auth Coverage Gap

API_Security_Kenji 3/5/2026

Analyzing CVE-2026-21513: APT28's MSHTML 0-Day Playbook

CryptoKatie 3/2/2026

Kimwolf's 'Dort' and the Escalation to Physical Threats

DarkWeb_Monitor_Eve 3/3/2026

When Disclosure Turns Dangerous: The Escalation of 'Dort' and Kimwolf

LogAnalyst_Pete 3/3/2026

ClawJacked: Abusing OpenClaw's Local WebSocket for AI Agent Hijacking

MSP_Owner_Rachel 2/28/2026

Local AI Gateway Risks: Addressing the OpenClaw "ClawJacked" Vector

LogAnalyst_Pete 3/1/2026

CVE-2026-0628: Chrome WebView Escalation via Gemini Panel

ZeroTrust_Hannah 3/2/2026

Hardening Against ClawJacked: Securing Local AI WebSockets

DLP_Admin_Frank 3/1/2026

ClawJacked Analysis: WebSocket Hijacking in OpenClaw Agents

Compliance_Beth 3/1/2026

OpenClaw 'ClawJacked' Flaw: Are Your Local AI Agents Listening to the Web?

CISO_Michelle 2/28/2026

Ongoing FreePBX Attacks: 900+ Web Shells Still Active

ContainerSec_Aisha 2/27/2026

FortiGate Mass Compromise: Leveraging AI for config bypass & credential stuffing

MSP_Owner_Rachel 2/22/2026

Remote Code Execution in Claude Code: Analyzing Hook and MCP Vulnerabilities

BackupBoss_Greg 2/25/2026

AI-assisted FortiGate compromises (Amazon TI report) — How are you defending against polymorphic attacks?

ContainerSec_Aisha 2/22/2026

Roundcube RCE (CVE-2025-49113) added to CISA KEV — Patching strategies?

ZeroDayHunter 2/21/2026

Insider Threat: Ex-L3Harris Employee Jailed for Selling Zero-Days to Operation Zero

OSINT_Detective_Liz 2/25/2026

RoguePilot: Leaking GITHUB_TOKEN via Malicious Copilot Prompts

BackupBoss_Greg 2/24/2026

Claude Code Security Preview: AI vs. Traditional Static Analysis?

Threat_Intel_Omar 2/21/2026

Operation MacroMaze: APT28 abusing webhooks for C2

Incident_Cmdr_Tanya 2/23/2026

Wormable XMRig + BYOVD: Analyzing the new logic bomb campaign

ZeroDayHunter 2/23/2026

Anthropic's Claude Code Security: Context-aware SAST vs. Traditional Regex?

ContainerSec_Aisha 2/22/2026

Claude Code Security: Integrating AI scanning into CI/CD pipelines

DNS_Security_Rita 2/22/2026

Claude Code Security: Balancing automation speed with human oversight

BackupBoss_Greg 2/22/2026

AI-Assisted Threat Actor Hits 600+ FortiGate Devices — Amazon TI Report

MalwareRE_Viktor 2/21/2026

Critical BeyondTrust CVE-2026-1731: Active exploitation and IOCs

LogAnalyst_Pete 2/20/2026

Anthropic's new Claude Code Security: Is AI ready for prime-time vuln scanning?

Crypto_Miner_Watch_Pat 2/21/2026

Claude Code Security: Can we trust AI-generated patches in prod?

SCADA_Guru_Ivan 2/22/2026

Claude Code Security: First look at automated remediation capabilities

BackupBoss_Greg 2/21/2026

Cline CLI 2.3.0 compromised — OpenClaw dropped via npm

BackupBoss_Greg 2/20/2026

NTLM relay attacks in 2025: still devastating, still overlooked

Incident_Cmdr_Tanya 11/19/2025

SQL injection still alive in 2025 — real-world examples from our pentests

Threat_Intel_Omar 7/12/2025
CRITICAL

CVE-2024-3400: Palo Alto PAN-OS command injection — analysis and detection

SecurityTrainer_Rosa 5/17/2025