Blog

DoppelCart: 119,000 domains in probably the largest documented fake-shop network Byte

The Vulnpocalypse Report: An Analysis Byte

Threat Actors Chain 0-day Exploits in Chrome & Windows Byte

CVE-2026-64561 - Zapscape, a KVM/x86 guest-to-host escape Vulnerability

CVE-2026-27912 - ResetNightmare: AD takeover via Kerberos password change Vulnerability

CVE-2026-50656 - ShieldBreak PoC claims a Defender RoguePlanet patch bypass Vulnerability

Mythic agent Dark runs BOFs in memory on macOS and Linux Byte

Inside a Russian-Speaking Operator's Ukrainian IP Camera Toolkit Byte

Turning Chrome Remote Desktop into Pure Red Team Ops Byte

Illegal Streaming Fronts a $7M Dropcatch Domain Operation Byte

China's Push to Export Military AI Byte

Chinese Analysts on Cyber Lessons From Russia's War in Ukraine Byte

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident Byte

Testing Claude Mythos Preview For Code Security Byte

Antares: Small Models for Vulnerability Localization Byte

CVE-2026-31431 - Copy Fail: Four Bytes to Root Vulnerability

FortiBleed: The Firewall Is the Foothold Vulnerability

The CVE System Meets the AI Firehose Byte

curl's First CVE Dispute Byte

CVE-2026-LGTM: Seven Scanners, One Honeypot Byte

ZRON: An Espionage Suite, Allegedly Byte

Orchestration Has No ATT&CK ID 5 min read

MITRE ATT&CK can tell you an attacker dumped credentials (T1003) and moved laterally over SSH (T1021). It cannot tell you those two steps were chosen, sequenced, and executed by an AI agent with …

Mini Shai-Hulud Worms Through TanStack npm Packages Byte

Megalodon: Mass Repo Backdooring via CI Workflows Byte

GitHub's Turn: 3,800 Internal Repositories Accessed Byte