Cybersecurity Research & Threat Intelligence
Research active vulnerabilities, cloud and application security, cybercrime, and supply chain risk with practical guidance for defenders.
Cybersecurity Research Coverage
Explore the research areas where Invaders publishes recurring analysis, from active exploitation and vulnerability management to cloud risk and supply chain security.
168 articles
Vulnerability Research
Active exploitation, CVEs, patch priorities, and exposure analysis.
52 articles
Threat Hunting & Intelligence
Threat actor activity, detection context, and defensive investigation guidance.
16 articles
Cloud & Application Security
Cloud platforms, web applications, identity, and engineering security risk.
20 articles
Cybercrime
Operational reporting on criminal ecosystems, breaches, and attacker activity.
5 articles
Supply Chain Security
Software delivery, third-party dependencies, and CI/CD trust boundaries.
ASOS cyber incident: why hijacked customer notifications deserve breach-level response
ASOS cyber incident: why hijacked customer notifications deserve breach-level response ASOS has confirmed that an unauthorised customer notification was sent to...
Lucas Oliveira
Research
CVE-2026-104286: FortiMail File Write Zero-Day
CVE-2026-104286: FortiMail File Write Zero-Day | 2026 Executive Summary Since October 1, 2026, the critical CVE-2026-104286 vulnerability in Fortinet FortiMail...
Lucas Oliveira
Research
CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited
CVE-2026-88779: Citrix NetScaler SAML Zero-Day Exploited | 2026 Executive Summary Citrix has released emergency updates for CVE-2026-88779, a newly assigned Net...
Lucas Oliveira
Research
CVE-2026-102489: Zammad Zero-Day Chain Hits Root
CVE-2026-102489: Zammad Zero-Day Chain Hits Root | 2026 Executive Summary Since September 21, 2026, the chained CVE-2026-102489 and CVE-2026-102490 vulnerabilit...
Lucas Oliveira
Research
Warlock ransomware is turning old SharePoint exposure into critical infrastructure outages
Warlock ransomware is turning old SharePoint exposure into critical infrastructure outages Warlock ransomware is back in the spotlight because the operators beh...
Lucas Oliveira
Research
Operation KillSwitch Disrupts KillSec, But Victim Follow-Up Still Matters
Operation KillSwitch Disrupts KillSec, But Victim Follow-Up Still Matters International law enforcement has disrupted KillSec, a ransomware and extortion group...
Lucas Oliveira
Research
Cisco SD-WAN Manager zero-day gives attackers admin API access
Cisco SD-WAN Manager zero-day gives attackers admin API access Cisco has patched CVE-2026-76504, a critical authentication bypass in Cisco Catalyst SD-WAN Manag...
Lucas Oliveira
Research
Apple CoreGraphics zero-day puts older iOS and macOS devices on the urgent patch path
Apple CoreGraphics zero-day puts older iOS and macOS devices on the urgent patch path Apple's September 28 security updates deserve fast attention from security...
Lucas Oliveira
Research
UK education networks face a wave of web-facing attacks
UK education networks face a wave of web-facing attacks UK schools, colleges, and universities are again showing why education has become one of the most diffic...
Lucas Oliveira
Research
SalesBleed shows how trusted AI agents can become data-exfiltration paths
SalesBleed shows how trusted AI agents can become data-exfiltration paths Salesforce Agentforce is the latest reminder that enterprise AI agents are not just ch...
Lucas Oliveira
Research
AI Agents Turned Retail Skimming Into a Low-Cost Cybercrime Pipeline
AI Agents Turned Retail Skimming Into a Low-Cost Cybercrime Pipeline A financially motivated operator has shown what happens when commodity offensive automation...
Lucas Oliveira
Research
CISA's Latest KEV Additions Put WSO2, Adobe Commerce, SharePoint, and MikroTik on a Short Clock
CISA's Latest KEV Additions Put WSO2, Adobe Commerce, SharePoint, and MikroTik on a Short Clock CISA's newest Known Exploited Vulnerabilities update is a useful...
Lucas Oliveira
Research