Cybersecurity Research & Threat Intelligence
Research active vulnerabilities, cloud and application security, cybercrime, and supply chain risk with practical guidance for defenders.
Cybersecurity Research Coverage
Explore the research areas where Invaders publishes recurring analysis, from active exploitation and vulnerability management to cloud risk and supply chain security.
168 articles
Vulnerability Research
Active exploitation, CVEs, patch priorities, and exposure analysis.
52 articles
Threat Hunting & Intelligence
Threat actor activity, detection context, and defensive investigation guidance.
16 articles
Cloud & Application Security
Cloud platforms, web applications, identity, and engineering security risk.
20 articles
Cybercrime
Operational reporting on criminal ecosystems, breaches, and attacker activity.
5 articles
Supply Chain Security
Software delivery, third-party dependencies, and CI/CD trust boundaries.
CISA KEV Deadline Turns Artifactory, ScreenConnect and RouterOS Bugs Into an Urgent Patch Queue
CISA KEV Deadline Turns Artifactory, ScreenConnect and RouterOS Bugs Into an Urgent Patch Queue Security teams have a narrow window to treat five newly cataloge...
Lucas Oliveira
Research
Brevo breach turns trusted crypto newsletters into phishing channels
Brevo breach turns trusted crypto newsletters into phishing channels Executive Summary A compromise at Brevo, the email marketing provider used by several crypt...
Lucas Oliveira
Research
Cisco Secure FMC Flaws Are Now an Active Firewall Management Risk
Cisco Secure FMC Flaws Are Now an Active Firewall Management Risk Cisco Secure Firewall Management Center is supposed to be the control point defenders use to m...
Lucas Oliveira
Research
Chrome's Latest V8 Zero-Day Is a Patch Priority, Even If the Exploit Details Are Quiet
Chrome's Latest V8 Zero-Day Is a Patch Priority, Even If the Exploit Details Are Quiet Google has shipped a Chrome Stable Channel update that fixes CVE-2026-874...
Lucas Oliveira
Research
Microsoft’s September Patch Tuesday Turns Into a Triage Test
Microsoft’s September Patch Tuesday Turns Into a Triage Test Microsoft’s September 2026 Patch Tuesday is less a routine update cycle and more a prioritization d...
Lucas Oliveira
Research
Counterfeit Installer Campaign Shows Why Download Telemetry Matters
Counterfeit Installer Campaign Shows Why Download Telemetry Matters Microsoft's latest campaign analysis is a useful reminder that initial access does not alway...
Lucas Oliveira
Research
Citrix NetScaler auth bypass now faces exploitation attempts
Citrix NetScaler auth bypass now faces exploitation attempts Executive Summary Attackers have started probing for CVE-2026-19490, a critical Citrix NetScaler AD...
Lucas Oliveira
Research
WordPress Site Owners Face Mass Exploitation of Super Forms and Elementor Pro Upload Flaws
WordPress Site Owners Face Mass Exploitation of Super Forms and Elementor Pro Upload Flaws Two critical WordPress plugin flaws are now being exploited at scale,...
Lucas Oliveira
Research
Dropbox breach shows why third-party identity links need zero trust
Dropbox breach shows why third-party identity links need zero trust Dropbox has confirmed that roughly 5,000 user accounts were accessed without authorization i...
Lucas Oliveira
Research
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock CISA's latest Known Exploited Vulnerabilities update is not just another list of...
Lucas Oliveira
Research
ServiceNow Critical Flaws Expose Enterprise Workflows
ServiceNow Critical Flaws Expose Enterprise Workflows | 2026 ServiceNow has patched a cluster of critical flaws in the Now Platform and AI Platform, including t...
Lucas Oliveira
Research
PaperCut NG/MF zero-day chain: CISA adds actively exploited flaws to KEV
PaperCut NG/MF zero-day chain: CISA adds actively exploited flaws to KEV Executive Summary CISA has added two actively exploited PaperCut NG/MF vulnerabilities...
Lucas Oliveira
Research