Cybersecurity Research & Threat Intelligence
Research active vulnerabilities, cloud and application security, cybercrime, and supply chain risk with practical guidance for defenders.
Cybersecurity Research Coverage
Explore the research areas where Invaders publishes recurring analysis, from active exploitation and vulnerability management to cloud risk and supply chain security.
168 articles
Vulnerability Research
Active exploitation, CVEs, patch priorities, and exposure analysis.
52 articles
Threat Hunting & Intelligence
Threat actor activity, detection context, and defensive investigation guidance.
16 articles
Cloud & Application Security
Cloud platforms, web applications, identity, and engineering security risk.
20 articles
Cybercrime
Operational reporting on criminal ecosystems, breaches, and attacker activity.
5 articles
Supply Chain Security
Software delivery, third-party dependencies, and CI/CD trust boundaries.
UK education networks face a wave of web-facing attacks
UK education networks face a wave of web-facing attacks UK schools, colleges, and universities are again showing why education has become one of the most diffic...
Lucas Oliveira
Research
SalesBleed shows how trusted AI agents can become data-exfiltration paths
SalesBleed shows how trusted AI agents can become data-exfiltration paths Salesforce Agentforce is the latest reminder that enterprise AI agents are not just ch...
Lucas Oliveira
Research
AI Agents Turned Retail Skimming Into a Low-Cost Cybercrime Pipeline
AI Agents Turned Retail Skimming Into a Low-Cost Cybercrime Pipeline A financially motivated operator has shown what happens when commodity offensive automation...
Lucas Oliveira
Research
CISA's Latest KEV Additions Put WSO2, Adobe Commerce, SharePoint, and MikroTik on a Short Clock
CISA's Latest KEV Additions Put WSO2, Adobe Commerce, SharePoint, and MikroTik on a Short Clock CISA's newest Known Exploited Vulnerabilities update is a useful...
Lucas Oliveira
Research
AI Agents Turn Retail Skimming Into a Low-Cost Cybercrime Operation
AI Agents Turn Retail Skimming Into a Low-Cost Cybercrime Operation Executive Summary Gambit Security has documented an active campaign in which a financially m...
Lucas Oliveira
Research
EvilTokens disruption gives defenders a short window to clean up device-code phishing risk
EvilTokens disruption gives defenders a short window to clean up device-code phishing risk Executive Summary Microsoft says it has disrupted infrastructure tied...
Lucas Oliveira
Research
North Korea's Contagious Interview campaign turns job tests into malware delivery
North Korea's Contagious Interview campaign turns job tests into malware delivery Executive Summary A new joint advisory from Japan, the United States, Australi...
Lucas Oliveira
Research
CVE-2026-87902: WordPress Template RCE Risk
CVE-2026-87902: WordPress Template RCE Risk | 2026 Executive Summary Since September 22, 2026, the critical CVE-2026-87902 vulnerability in WordPress has become...
Lucas Oliveira
Research
Rust crate owners targeted in video-call supply chain campaign
Rust crate owners targeted in video-call supply chain campaign Rust's security response working group and the crates.io team have warned that prominent Rust con...
Lucas Oliveira
Research
CISA deadline arrives for exploited Linux kernel AF_ALG race condition
CISA deadline arrives for exploited Linux kernel AFALG race condition CISA's September 21 remediation deadline for CVE-2025-39964 should push this Linux kernel...
Lucas Oliveira
Research
ShinyHunters Breach of Clop Leak Site Shows Ransomware Infrastructure Is a Target Too
ShinyHunters Breach of Clop Leak Site Shows Ransomware Infrastructure Is a Target Too Ransomware leak sites are usually discussed as pressure tools against vict...
Lucas Oliveira
Research
Operation RapidRust shows APT36 evolving beyond simple phishing lures
Operation RapidRust shows APT36 evolving beyond simple phishing lures APT36, also tracked as Transparent Tribe, has a new campaign worth more than a passing mal...
Lucas Oliveira
Research