May 20, 2026We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis…
April 21, 2026CVE-2025-40551 details multiple chained vulnerabilities in SolarWinds Web Help Desk that allow unauthenticated attackers to achieve remote code execution on…
April 21, 2026On Monday, 16 October, Cisco reported a critical zero-day vulnerability in the web UI feature of its IOS XE software…
April 21, 2026The engineering team has been working tirelessly to improve the "what to wow" user experience, add more attack content, add…
April 9, 2026Analyze CVE-2025-32756, a Fortinet buffer overflow flaw under active attack, and see how NodeZero can validate exposure now.
April 9, 2026Introduction Our last blog post on the FortiClient EMS SQL injection vulnerability, CVE-2023-48788, as it turns out only worked on…
April 9, 2026Log4Shell is a "once-in-a-decade" type of vulnerability that will linger in environments for years to come. For a vulnerability with…
March 19, 2026After compromising a Windows domain controller, one of the actions that NodeZero, our autonomous pentest product, performs is dumping all…
March 19, 2026Introduction In a recent PSIRT, Fortinet acknowledged CVE-2023-48788 - a SQL injection in FortiClient EMS that can lead to remote…
March 19, 2026Introduction This post is a follow up to https://horizon3.ai/attack-research/attack-blogs/cisco-ios-xe-cve-2023-20198-theory-crafting/. Previously, we explored the patch for CVE-2023-20273 and CVE-2023-20198 affecting Cisco…