Apple Patched CVE-2026-86950: Which iPhones and Macs Still Need the Fix?
Apple patched a CoreGraphics code-execution flaw and says it may have been used in targeted attacks. Identify affected devices, install the right update, and verify the result.
Threat Intelligence & Analysis
Offensive thinking.
Offensive thinking.
Defensive expertise.
In-depth red team tactics, blue team strategy — and privacy-first security tools that run entirely in your browser. No accounts. No telemetry. No data leaves your machine.
Featured
Latest analysis
Archive
Recent posts
ShinyHunters Arrest in the Netherlands: What the Evidence Shows and What Defenders Should Check
Dutch police have arrested a suspect in the ShinyHunters investigation. The arrest does not settle who carried out the Odido or FBI incidents; the documented access paths still demand action.
ShinyHunters Claims an FBI Breach: What the Jobs-Site Evidence Actually Shows
The FBI now describes a cyber incident involving FBIJobs.gov. New reporting strengthens the evidence of personnel data theft, while the full scope and entry path remain unresolved.
Map Your Login Chain Before Attackers Do: A Practical Guide to Finding Workflow Gaps
A login screen is only one step in an identity workflow. Map every entry, recovery, session, and high-risk action path, then test where the server actually enforces the rules.
Citrix NetScaler Zero-Days Exploited: What to Patch and How to Check for Compromise
Citrix confirms exploitation of two NetScaler flaws. Check affected builds and DTLS exposure, plan the upgrade, and investigate possible compromise.
F5 BIG-IP APM Under Attack: Check the OAuth Boundary, Patch, and Investigate
F5 confirms exploitation of CVE-2026-94127. Identify affected APM virtual servers, install the fixed hotfix, and investigate OAuth failures and appliance activity.
Passkey Lures, Stolen Sessions, and the Microsoft 365 Data Trail
Microsoft describes intrusions that start with fake passkey support calls and continue through new MFA methods, Graph reconnaissance, and cloud data access.