vulnerability
Chrome's Latest V8 Zero-Day Is a Patch Priority, Even If the Exploit Details Are Quiet
Chrome's Latest V8 Zero-Day Is a Patch Priority, Even If the Exploit Details Are Quiet Google has shipped a Chrome Stable Channel update that fixes CVE-2026-874...
Lucas Oliveira
Research
Microsoft’s September Patch Tuesday Turns Into a Triage Test
Microsoft’s September Patch Tuesday Turns Into a Triage Test Microsoft’s September 2026 Patch Tuesday is less a routine update cycle and more a prioritization d...
Lucas Oliveira
Research
Citrix NetScaler auth bypass now faces exploitation attempts
Citrix NetScaler auth bypass now faces exploitation attempts Executive Summary Attackers have started probing for CVE-2026-19490, a critical Citrix NetScaler AD...
Lucas Oliveira
Research
WordPress Site Owners Face Mass Exploitation of Super Forms and Elementor Pro Upload Flaws
WordPress Site Owners Face Mass Exploitation of Super Forms and Elementor Pro Upload Flaws Two critical WordPress plugin flaws are now being exploited at scale,...
Lucas Oliveira
Research
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock CISA's latest Known Exploited Vulnerabilities update is not just another list of...
Lucas Oliveira
Research
ServiceNow Critical Flaws Expose Enterprise Workflows
ServiceNow Critical Flaws Expose Enterprise Workflows | 2026 ServiceNow has patched a cluster of critical flaws in the Now Platform and AI Platform, including t...
Lucas Oliveira
Research
PaperCut NG/MF zero-day chain: CISA adds actively exploited flaws to KEV
PaperCut NG/MF zero-day chain: CISA adds actively exploited flaws to KEV Executive Summary CISA has added two actively exploited PaperCut NG/MF vulnerabilities...
Lucas Oliveira
Research
Citrix NetScaler CVE-2026-8452 is now a KEV patch priority
Citrix NetScaler CVE-2026-8452 is now a KEV patch priority Executive Summary CISA's latest Known Exploited Vulnerabilities update has turned CVE-2026-8452 from...
Lucas Oliveira
Research
cPanel CVE-2026-65643 turns domain parking into a root-control risk
cPanel CVE-2026-65643 turns domain parking into a root-control risk cPanel has disclosed CVE-2026-65643, a critical [vulnerability](https://invaders.ie/resource...
Lucas Oliveira
Research
Next.js Critical RCE Fixes Put Self-Hosted Apps on a Short Patch Clock
Next.js Critical RCE Fixes Put Self-Hosted Apps on a Short Patch Clock The August 2026 Next.js security release is not a routine framework bump. It fixes two cr...
Lucas Oliveira
Research
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident Self-hosted source control is rarely treated like an internet-facing edge appliance,...
Lucas Oliveira
Research
CISA Adds Oracle WebLogic Proxy Plug-in Flaw to KEV as Exploitation Pressure Rises
CISA Adds Oracle WebLogic Proxy Plug-in Flaw to KEV as Exploitation Pressure Rises CISA has added CVE-2026-21962, a maximum-severity Oracle HTTP Server and Orac...
Lucas Oliveira
Research