#Exposure Management
Iran-linked PLC attacks show why internet-exposed OT is now an incident-response priority
Iran-linked PLC attacks show why internet-exposed OT is now an incident-response priority U.S. agencies have updated their warning on Iran-affiliated cyber acti...
Lucas Oliveira
Research
Check Point CVE-2026-16232 puts firewall management in the blast radius
Check Point CVE-2026-16232 puts firewall management in the blast radius Check Point has patched an actively exploited SmartConsole authentication bypass that ca...
Lucas Oliveira
Research
Windmill CVE-2026-29059 turns log access into a secrets problem
Windmill CVE-2026-29059 turns log access into a secrets problem Attackers are now exploiting CVE-2026-29059, a Windmill path traversal flaw that lets unauthenti...
Lucas Oliveira
Research
SharePoint CVE-2026-50522 makes patching only the first step
SharePoint CVE-2026-50522 makes patching only the first step Microsoft SharePoint Server is back in the emergency lane. CVE-2026-50522, a critical deserializati...
Lucas Oliveira
Research
ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets
ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets ServiceNow's July security advisory for CVE-2026-6875 has moved quickly from "cri...
Lucas Oliveira
Research
NGINX CVE-2026-42533 turns a narrow map regex bug into an urgent patch window
NGINX CVE-2026-42533 turns a narrow map regex bug into an urgent patch window F5 has released fixes for CVE-2026-42533, a critical NGINX Plus and NGINX Open Sou...
Lucas Oliveira
Research
Check Point hotfixes actively exploited IKEv1 VPN bypass
Check Point hotfixes actively exploited IKEv1 VPN bypass CVE-2026-50751 is the kind of security flaw that punishes organizations for leaving legacy remote-acces...
Lucas Oliveira
Research
Cisco patches another SD-WAN zero-day after limited exploitation
Cisco patches another SD-WAN zero-day after limited exploitation Cisco has disclosed yet another actively exploited weakness in its SD-WAN stack, and the import...
Lucas Oliveira
Research
Cisco CUCM SSRF bug turns WebDialer exposure into a path toward root
Cisco CUCM SSRF bug turns WebDialer exposure into a path toward root Cisco's latest Unified Communications Manager advisory deserves attention because it turns...
Lucas Oliveira
Research
CVE-2026-41940 turns exposed cPanel and WHM servers into control-plane takeover targets
CVE-2026-41940 turns exposed cPanel and WHM servers into control-plane takeover targets CVE-2026-41940 is a critical authentication bypass in cPanel and WHM, an...
Lucas Oliveira
Research
CVE-2026-33032 lets attackers take over exposed nginx-ui servers
CVE-2026-33032 lets attackers take over exposed nginx-ui servers CVE-2026-33032 is the kind of [vulnerability](https://invaders.ie/resources/glossary/vulnerabil...
Lucas Oliveira
Research
CISA KEV flags Quest KACE SMA auth bypass as a high-priority risk
CISA KEV flags Quest KACE SMA auth bypass as a high-priority risk CVE-2025-32975 is the kind of issue defenders should triage quickly because it affects a manag...
Lucas Oliveira
Research