Cybersecurity Research & Threat Intelligence
Research active vulnerabilities, cloud and application security, cybercrime, and supply chain risk with practical guidance for defenders.
Cybersecurity Research Coverage
Explore the research areas where Invaders publishes recurring analysis, from active exploitation and vulnerability management to cloud risk and supply chain security.
144 articles
Vulnerability Research
Active exploitation, CVEs, patch priorities, and exposure analysis.
36 articles
Threat Hunting & Intelligence
Threat actor activity, detection context, and defensive investigation guidance.
16 articles
Cloud & Application Security
Cloud platforms, web applications, identity, and engineering security risk.
11 articles
Cybercrime
Operational reporting on criminal ecosystems, breaches, and attacker activity.
5 articles
Supply Chain Security
Software delivery, third-party dependencies, and CI/CD trust boundaries.
CVE-2025-26399: SolarWinds WHD Exploitation Hits Servers
CVE-2025-26399: SolarWinds WHD Exploitation Hits Servers | 2026 Executive Summary CVE-2025-26399 in SolarWinds Web Help Desk has moved from “critical but patcha...
Lucas Oliveira
Research
Microsoft March 2026 Patch Tuesday Fixes Two Zero-Days
Why This Patch Tuesday Matters Microsoft's March 2026 Patch Tuesday addressed 79 vulnerabilities, including two publicly disclosed zero-days and three critical...
Lucas Oliveira
Research
Chrome Zero-Days CVE-2026-3909 and CVE-2026-3910 Hit KEV
Chrome Zero-Days CVE-2026-3909 and CVE-2026-3910 Hit KEV | 2026 Executive Summary CVE-2026-3909 and CVE-2026-3910 became an urgent enterprise patching priority...
Lucas Oliveira
Research
Veeam patches critical backup server flaws with RCE risk
Veeam patches critical backup server flaws with RCE risk Veeam’s March 2026 security update deserves immediate attention from enterprise defenders. The company...
Lucas Oliveira
Research
TELUS Digital breach: ShinyHunters claims 1PB data theft
TELUS Digital breach: ShinyHunters claims 1PB data theft | 2026 Executive Summary TELUS Digital confirmed on March 12, 2026 that it is investigating unauthorize...
Lucas Oliveira
Research
Critical n8n Flaws Enable RCE and Credential Exposure
Critical n8n flaws enable RCE and credential exposure | 2026 Executive Summary Two critical n8n flaws disclosed in March 2026 significantly raise risk for both...
Lucas Oliveira
Research
CISA KEV update puts Ivanti, SolarWinds, and Omnissa on urgent patch list
CISA KEV update puts Ivanti, SolarWinds, and Omnissa on urgent patch list CISA’s March 2026 KEV update deserves attention well beyond federal environments. By a...
Lucas Oliveira
Research
Doppelgänger backend leak maps 100+ disinformation domains
Doppelgänger: backend artifacts map 100+ disinformation domains | 2026 Executive Summary Researchers tracking Russia-linked influence operations say backend art...
Lucas Oliveira
Research
Coruna iOS Exploit Kit Likely Traced to L3Harris Trenchant
Coruna iOS exploit kit likely traced to L3Harris Trenchant Executive Summary Google Threat Intelligence Group says the Coruna iPhone exploit framework was used...
Lucas Oliveira
Research
UK Launches Online Crime Centre to Disrupt Fraud | 2026
UK Launches Online Crime Centre to Disrupt Fraud | 2026 Executive Summary The UK government has confirmed that a new Online Crime Centre (OCC) will begin operat...
Lucas Oliveira
Research
ZITADEL 1-Click XSS Enables Account Takeover | 2026
ZITADEL 1-Click XSS Enables Account Takeover | 2026 Executive Summary ZITADEL disclosed CVE-2026-29191 in early March 2026, warning that versions 4.0.0 through...
Lucas Oliveira
Research
APT28 BeardShell Campaign Targets Ukraine | 2026
APT28: BeardShell and Covenant Hit Ukraine | 2026 Executive Summary On March 11, 2026, ESET detailed how APT28 (aka Sednit/Fancy Bear) has reactivated a more ad...
Lucas Oliveira
Research