JFrog Artifactory CVEs: Your Artifact Repository Is a Build Boundary
CISA KEV activity and a fresh critical Artifactory authentication bypass show why package repositories need incident-grade monitoring, not just routine patching.
Threat Intelligence & Analysis
Offensive thinking.
Offensive thinking.
Defensive expertise.
In-depth red team tactics, blue team strategy — and privacy-first security tools that run entirely in your browser. No accounts. No telemetry. No data leaves your machine.
Featured
Latest analysis
Archive
Recent posts
ownCloud CVE-2023-49105: The File Server Bug That Waited Three Years
CISA added an old ownCloud WebDAV authentication bypass to KEV after reported exploitation against Philippine research and defense-linked targets. The lesson is not novelty. It is exposed file infrastructure.
Berlin's Landesnetz Cyberattack: Segmentation Worked, Then the Business Broke
Berlin isolated two state ministries after a cyberattack on the Landesnetz. The incident is a practical lesson in public-sector segmentation, crisis communications, and data-theft triage.
153M Driver's License Scans for Sale: ID Verification Became the Breach Surface
KrebsOnSecurity reports that the FBI is investigating a dark web service selling more than 153 million driver's license scans. The lesson is not just identity theft. It is vendor concentration around identity proofing.
PaperCut CVE-2026-81578 and 82078: The Print Server Became an RCE Pivot
PaperCut NG/MF has an actively exploited authentication-bypass and unsafe class-loading chain. Patch Release 2 matters, but exposed servers also need immediate compromise triage.
Julius Kivimäki and Vastaamo: When Patient Data Became the Ransom
The Vastaamo case was not just a Finnish hacker story. It showed how exposed databases, weak governance, poor logging, and delayed breach response can turn clinical records into direct extortion against patients.
TeamPCP Arrests in Australia: The Supply Chain Lesson Is Bigger Than Two Suspects
Australian and U.S. authorities have charged alleged TeamPCP operators after a software supply chain campaign that authorities say hit more than 1,000 organizations. The defensive lesson is about tokens, publishing rights, and update speed.