Metasploit

Cato CTRL™ Threat Research: Preventing Privilege Escalation via Active Directory Certificate Services (ADCS)

Cato CTRL™ Threat Research: Foxveil – New Malware Loader Abusing Cloudflare, Discord, and Netlify as Staging Infrastructure

Copy Fail and DirtyFrag: Linux Page Cache Bugs in the Wild

Silent Ransom Group - Leak Analysis

Metasploit Wrap Up: Langflow, MongoDB, and More

Open Ports: The Invisible Doors on Your Attack Surface

Open Ports Aren’t the Problem. Unknown Exposure Is.

From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

Neither Malware nor Harmless: Tracking the NPS Proxy Across the Internet

Metasploit Wrap Up: This One Goes to Sixteen!

Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

The Operations of the Swarm: Inside the Complex World of Mirai-Based Botnets

Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs

Apache ActiveMQ Exploit Leads to LockBit Ransomware

Cat’s Got Your Files: Lynx Ransomware

From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

Bucklog’s Machine: Inside a Kubernetes Scanning Fleet

From Base64 to Reverse Shell: Unpacking Malware from a Word Document

From Campus to C2: Tracking a Persistent Chinese Operation Against Vietnamese Universities

Metasploit Exploit Targets Actively Exploited PaperCut NG/MF Zero-Day RCE Chain

CISA Warns of Two PaperCut NG/MF Vulnerabilities Actively Exploited in Attacks

Exploits and vulnerabilities in Q2 2026

Critical Rails Flaw Exposes Server Secrets and Enables Remote Code Execution

VELETRIX Loader Dissection: Kill Chain Analysis of China-Nexus Telecommunications Infrastructure Targeting

Critical SonicWall SSRF Zero-Day Opens WebSocket Tunnel to Internal Services

GhostShell (MB-0009): Targeting Ukraine’s UAV Operations and Defense Supply Chain

China-Linked Group Deploys Custom ASPX and ASHX Web Shells

February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from January