June 12, 2026Horizon3 details indicators of compromise, affected configurations, and mitigation guidance for CVE-2026-48558, a SimpleHelp OIDC authentication bypass vulnerability.
June 9, 2026New research reveals how to make AI-powered cyber defense safe, stable, and reliable for real-world deployment.
May 20, 2026The 2026 Buyer’s Guide to Penetration Testing explains how security leaders are reevaluating pentesting based on exploitability, validation, and real-world…- May 18, 2026This whitepaper explains how organizations can move beyond CMMC compliance to continuously validate real-world security across the supply chain.
May 5, 2026A leadership guide to aligning SOC and ITSM teams using evidence-driven cyber risk management and real-world validation.
April 22, 2026CVE-2026-34197 enables remote code execution in ActiveMQ via Jolokia. Exploitation chains VM transport and remote config loading.
April 21, 2026The engineering team has been working tirelessly to improve the "what to wow" user experience, add more attack content, add…
April 9, 2026Critical Ivanti Endpoint Manager vulnerabilities revealed—learn about CVE exploits and mitigation.
March 19, 2026After compromising a Windows domain controller, one of the actions that NodeZero, our autonomous pentest product, performs is dumping all…
March 18, 2026One of the most effective techniques NodeZero employs for initial access is password spray. It's a primitive technique, basically guessing…