Back to Blog
Lucas Oliveira
Research
A DevOps engineer and cybersecurity enthusiast with a passion for uncovering the latest in zero-day exploits, automation, and emerging tech. I write to share real-world insights from the trenches of IT and security, aiming to make complex topics more accessible and actionable. Whether I’m building tools, tracking threat actors, or experimenting with AI workflows, I’m always exploring new ways to stay one step ahead in today’s fast-moving digital landscape.
169
Articles
6
Avg. Read Time
13
Categories
2024
Joined
Expertise Areas
vulnerability
Cybercrime
supply chain attack
Threat Hunting & Intel
Cloud & Application Security
Supply Chain Security
Data Breach
Ransomware Trends
Data Protection
Cloud Security
Security
Ransomware Groups
Infostealer
Articles by Lucas Oliveira
Gitea Docker flaw turns a trusted proxy header into account takeover
Gitea Docker flaw turns a trusted proxy header into account takeover Gitea has fixed a critical authentication bypass in its official Docker images that could l...
July 12, 2026
7 min read
Lucas Oliveira
Research
U-Boot FIT signature flaws expose a fragile pre-OS trust boundary
U-Boot FIT signature flaws expose a fragile pre-OS trust boundary Firmware security company Binarly has disclosed six vulnerabilities in U-Boot's FIT signature...
July 11, 2026
8 min read
Lucas Oliveira
Research
Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path
Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path Microsoft has released a fix for CVE-2026-50656, the Microsoft Defender vulnerability p...
July 10, 2026
7 min read
Lucas Oliveira
Research
Unpatched Tenda router backdoor turns home gateways into a trust problem
Unpatched Tenda router backdoor turns home gateways into a trust problem CERT/CC has disclosed an undocumented authentication backdoor in several Tenda router f...
July 9, 2026
8 min read
Lucas Oliveira
Research
CISA's July KEV batch puts Joomla page builders and Langflow on emergency patch lists
CISA's July KEV batch puts Joomla page builders and Langflow on emergency patch lists CISA added three vulnerabilities to its Known Exploited Vulnerabilities ca...
July 8, 2026
7 min read
Lucas Oliveira
Research
Adobe ColdFusion CVE-2026-48282 moves from patch advisory to active exploitation
Adobe ColdFusion CVE-2026-48282 moves from patch advisory to active exploitation Adobe ColdFusion administrators have a narrow patch window for CVE-2026-48282,...
July 7, 2026
6 min read
Lucas Oliveira
Research
Vect and TeamPCP show how stolen build secrets become ransomware access
Vect and TeamPCP show how stolen build secrets become ransomware access Sophos says two cybercrime groups, Vect and TeamPCP, have formalized a partnership that...
July 5, 2026
7 min read
Lucas Oliveira
Research
JADEPUFFER shows how agentic AI can turn exposed Langflow into ransomware
JADEPUFFER shows how agentic AI can turn exposed Langflow into ransomware Sysdig has documented what it assesses as one of the first clear examples of agentic r...
July 4, 2026
6 min read
Lucas Oliveira
Research
CitrixBleed-style NetScaler flaw CVE-2026-8451 is already being tested in the wild
CitrixBleed-style NetScaler flaw CVE-2026-8451 is already being tested in the wild Citrix NetScaler administrators have another edge-appliance exposure to triag...
July 4, 2026
5 min read
Lucas Oliveira
Research
...
Hot TopicsLast 7 days
Categories14
Stay Updated
Get the latest cybersecurity insights in your inbox.