Cybersecurity Research & Threat Intelligence
Research active vulnerabilities, cloud and application security, cybercrime, and supply chain risk with practical guidance for defenders.
Cybersecurity Research Coverage
Explore the research areas where Invaders publishes recurring analysis, from active exploitation and vulnerability management to cloud risk and supply chain security.
168 articles
Vulnerability Research
Active exploitation, CVEs, patch priorities, and exposure analysis.
52 articles
Threat Hunting & Intelligence
Threat actor activity, detection context, and defensive investigation guidance.
16 articles
Cloud & Application Security
Cloud platforms, web applications, identity, and engineering security risk.
20 articles
Cybercrime
Operational reporting on criminal ecosystems, breaches, and attacker activity.
5 articles
Supply Chain Security
Software delivery, third-party dependencies, and CI/CD trust boundaries.
Featured Posts
Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform
Cl0p Turns PTC Windchill Exploitation Into a Purpose-Built Extortion Platform Product lifecycle management systems are not usually the first asset class defende...
Lucas Oliveira
Research
BeyondTrust auth bypass flaws put remote support appliances on the urgent patch list
BeyondTrust auth bypass flaws put remote support appliances on the urgent patch list BeyondTrust has disclosed four vulnerabilities in its Remote Support and Pr...
Lucas Oliveira
Research
Gitea Docker flaw turns a trusted proxy header into account takeover
Gitea Docker flaw turns a trusted proxy header into account takeover Gitea has fixed a critical authentication bypass in its official Docker images that could l...
Lucas Oliveira
Research
U-Boot FIT signature flaws expose a fragile pre-OS trust boundary
U-Boot FIT signature flaws expose a fragile pre-OS trust boundary Firmware security company Binarly has disclosed six vulnerabilities in U-Boot's FIT signature...
Lucas Oliveira
Research
Qubole AWS Trust Abuse Shows Why Dormant Cloud Integrations Stay Dangerous
Qubole AWS Trust Abuse Shows Why Dormant Cloud Integrations Stay Dangerous An attacker used credentials associated with Qubole's AWS account to enter multiple c...
Lucas Oliveira
Research
Cold-Chain OT Is Now a Cybersecurity Boundary: What the Refrigeration Attacks Mean
Cold-Chain OT Is Now a Cybersecurity Boundary: What the Refrigeration Attacks Mean Federal agencies are warning that malicious cyber actors are targeting indust...
Lucas Oliveira
Research
SonicWall SSL-VPN MFA Bypass Is Being Exploited: Patch the Authentication Boundary
SonicWall SSL-VPN MFA Bypass Is Being Exploited: Patch the Authentication Boundary SonicWall has warned that attackers are exploiting a vulnerability in SonicOS...
Lucas Oliveira
Research
Barracuda ESG Flaws Chain to Root Access: Why the Admin UI Is Now a Critical Boundary
Barracuda ESG Flaws Chain to Root Access: Why the Admin UI Is Now a Critical Boundary Barracuda has disclosed two vulnerabilities that can be chained to take ov...
Lucas Oliveira
Research
Binance Heist Shows How Social Engineering Can Reach a $6.34 Billion Signing Path
Binance Heist Shows How Social Engineering Can Reach a $6.34 Billion Signing Path The October 29 Binance security incident moved more than $6.34 billion in digi...
Lucas Oliveira
Research
NIKKE PC Launcher Compromise Turns a Trusted Update Path into a Malware Delivery Channel
NIKKE PC Launcher Compromise Turns a Trusted Update Path into a Malware Delivery Channel The Windows PC launcher for Goddess of Victory: NIKKE was tampered with...
Lucas Oliveira
Research
XCPE Backdoor Turns Android TV Boxes into a Supply-Chain Botnet
XCPE Backdoor Turns Android TV Boxes into a Supply-Chain Botnet Google and industry partners have disrupted a backdoor that enrolled more than 1.3 million Andro...
Lucas Oliveira
Research
NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028
NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028 The UK's National Cyber Security Centre (NCSC) says the country should prepare for...
Lucas Oliveira
Research
Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active
Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active Organizations that patched Ivanti Connect Secure after the firs...
Lucas Oliveira
Research
GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue
GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue GitLab self-managed administrators have a narrow remediation window for CVE...
Lucas Oliveira
Research
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface
NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface Kaspersky’s discovery of NetamLoader shows how a highly tailored intrusion ca...
Lucas Oliveira
Research
GMO Onamae Cloud Breach: When a Hosted Desktop Becomes a Trading-Risk Control Plane
GMO Onamae Cloud Breach: When a Hosted Desktop Becomes a Trading-Risk Control Plane GMO Internet’s Onamae.com Desktop Cloud incident shows how a compromise of a...
Lucas Oliveira
Research