Cybersecurity Research & Threat Intelligence
Research active vulnerabilities, cloud and application security, cybercrime, and supply chain risk with practical guidance for defenders.
Cybersecurity Research Coverage
Explore the research areas where Invaders publishes recurring analysis, from active exploitation and vulnerability management to cloud risk and supply chain security.
144 articles
Vulnerability Research
Active exploitation, CVEs, patch priorities, and exposure analysis.
36 articles
Threat Hunting & Intelligence
Threat actor activity, detection context, and defensive investigation guidance.
16 articles
Cloud & Application Security
Cloud platforms, web applications, identity, and engineering security risk.
11 articles
Cybercrime
Operational reporting on criminal ecosystems, breaches, and attacker activity.
5 articles
Supply Chain Security
Software delivery, third-party dependencies, and CI/CD trust boundaries.
AWS Kiro flaw shows why AI coding agents need platform-level guardrails
AWS Kiro flaw shows why AI coding agents need platform-level guardrails AWS has patched a Kiro IDE security issue that captures one of the sharpest risks in age...
Lucas Oliveira
Research
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation
Cisco FMC Static Credential Flaw Lands in KEV After Active Exploitation Cisco has released hot fixes for CVE-2026-20316, a static credential [vulnerability](htt...
Lucas Oliveira
Research
JetBrains TeamCity RCE Puts Self-Hosted CI/CD Servers on an Urgent Patch Clock
JetBrains TeamCity RCE Puts Self-Hosted CI/CD Servers on an Urgent Patch Clock JetBrains has released fixes for CVE-2026-63077, a critical unauthenticated [remo...
Lucas Oliveira
Research
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access STAR Labs has published technical details for CVE-2026-53264, a Linux kernel race...
Lucas Oliveira
Research
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius Arista's July 27 advisory on CVE-2026-16812 deserves immediate attention because the aff...
Lucas Oliveira
Research
Russian Zimbra Campaign Turns Email Preview Into an Exfiltration Path
Russian Zimbra Campaign Turns Email Preview Into an Exfiltration Path The latest joint warning on Zimbra is worth treating as more than another [phishing](https...
Lucas Oliveira
Research
Check Point SmartConsole CVE-2026-16232 turns exposed management into firewall takeover risk
Check Point SmartConsole CVE-2026-16232 turns exposed management into firewall takeover risk Check Point has released an urgent July 2026 security update for an...
Lucas Oliveira
Research
Iran-linked PLC attacks show why internet-exposed OT is now an incident-response priority
Iran-linked PLC attacks show why internet-exposed OT is now an incident-response priority U.S. agencies have updated their warning on Iran-affiliated cyber acti...
Lucas Oliveira
Research
Check Point CVE-2026-16232 puts firewall management in the blast radius
Check Point CVE-2026-16232 puts firewall management in the blast radius Check Point has patched an actively exploited SmartConsole authentication bypass that ca...
Lucas Oliveira
Research
Windmill CVE-2026-29059 turns log access into a secrets problem
Windmill CVE-2026-29059 turns log access into a secrets problem Attackers are now exploiting CVE-2026-29059, a Windmill path traversal flaw that lets unauthenti...
Lucas Oliveira
Research
SharePoint CVE-2026-50522 makes patching only the first step
SharePoint CVE-2026-50522 makes patching only the first step Microsoft SharePoint Server is back in the emergency lane. CVE-2026-50522, a critical deserializati...
Lucas Oliveira
Research
ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets
ServiceNow CVE-2026-6875 turns AI workflow platforms into urgent patch targets ServiceNow's July security advisory for CVE-2026-6875 has moved quickly from "cri...
Lucas Oliveira
Research