Knownsec: The King of Vulnerability Missed Three Vulnerabilities of Its Own

Natto Thoughts reports on a November 2025 leak from Knownsec (知道创宇), a major Chinese cybersecurity company, which allegedly included 12,000 confidential documents. NetAskari went through the material that surfaced and found product brochures, a ZoomEye pitch and a target library listing militaries, telecoms and energy operators in several countries, but no state-of-the-art tooling, and suspects the data stems from an older breach in 2023. The irony of a vulnerability research firm getting pwned writes itself.