Cybersecurity Research & Threat Intelligence
Research active vulnerabilities, cloud and application security, cybercrime, and supply chain risk with practical guidance for defenders.
Cybersecurity Research Coverage
Explore the research areas where Invaders publishes recurring analysis, from active exploitation and vulnerability management to cloud risk and supply chain security.
144 articles
Vulnerability Research
Active exploitation, CVEs, patch priorities, and exposure analysis.
36 articles
Threat Hunting & Intelligence
Threat actor activity, detection context, and defensive investigation guidance.
16 articles
Cloud & Application Security
Cloud platforms, web applications, identity, and engineering security risk.
11 articles
Cybercrime
Operational reporting on criminal ecosystems, breaches, and attacker activity.
5 articles
Supply Chain Security
Software delivery, third-party dependencies, and CI/CD trust boundaries.
7-Zip CVE-2026-14266 turns archive handling into an endpoint patch priority
7-Zip CVE-2026-14266 turns archive handling into an endpoint patch priority The latest 7-Zip security disclosure is not the kind of vulnerability that lets an a...
Lucas Oliveira
Research
NGINX CVE-2026-42533 turns a narrow map regex bug into an urgent patch window
NGINX CVE-2026-42533 turns a narrow map regex bug into an urgent patch window F5 has released fixes for CVE-2026-42533, a critical NGINX Plus and NGINX Open Sou...
Lucas Oliveira
Research
SharePoint RCE zero-day forces a July 19 incident-response deadline
SharePoint RCE zero-day forces a July 19 incident-response deadline Microsoft SharePoint Server administrators have another urgent on-premises exposure to handl...
Lucas Oliveira
Research
wp2shell puts WordPress core in emergency patch mode
wp2shell puts WordPress core in emergency patch mode WordPress administrators have a rare core-level emergency on their hands. On July 17, 2026, WordPress relea...
Lucas Oliveira
Research
Oracle E-Business Suite flaw hits CISA KEV as payment systems face takeover risk
Oracle E-Business Suite flaw hits CISA KEV as payment systems face takeover risk CISA has added CVE-2026-46817, a critical Oracle E-Business Suite vulnerability...
Lucas Oliveira
Research
FortiSandbox command injection flaws move from patch queue to exploited risk
FortiSandbox command injection flaws move from patch queue to exploited risk CISA has added two Fortinet FortiSandbox vulnerabilities to its Known Exploited Vul...
Lucas Oliveira
Research
Firefox and Chrome fixes turn browser patching into this week's urgent control
Firefox and Chrome fixes turn browser patching into this week's urgent control Mozilla and Google both shipped important browser security updates this week, and...
Lucas Oliveira
Research
Exploited SonicWall SMA zero-days put remote access gateways on the clock
Exploited SonicWall SMA zero-days put remote access gateways on the clock SonicWall has released urgent fixes for two exploited zero-day vulnerabilities in its...
Lucas Oliveira
Research
Exploited Joomla extension flaws turn file uploads into emergency patch work
Exploited Joomla extension flaws turn file uploads into emergency patch work CISA has added two exploited Joomla extension vulnerabilities to its Known Exploite...
Lucas Oliveira
Research