Research Archive | CyberDax Origins

The articles presented here are historical reproductions of the original research, with certain proprietary detection content removed.

June 23, 2026 [TTD] Untrusted Media Processing Through FFmpeg Decoder Memory Corruption
Research by Edward 'Tony' Dolley
June 17, 2026 [TTD] LiteLLM AI Gateway Command Injection and Provider-Key Exposure
Research by Edward 'Tony' Dolley
June 17, 2026 [TTD] Joomla Editor Profile Import Abuse and PHP Webshell Execution Exposure
Research by Edward 'Tony' Dolley
June 15, 2026 [TTD] Trusted WordPress Script Delivery Abuse and CMS Admin-Session Backdoor Exposure
Research by Edward 'Tony' Dolley
June 14, 2026 [TTD] Splunk Enterprise Sidecar Service Abuse and SIEM Platform Compromise Exposure
Research by Edward 'Tony' Dolley
June 11, 2026 [TTD] FortiSandbox Appliance Command Execution and Security-Control Compromise Exposure
Research by Edward 'Tony' Dolley
June 8, 2026 [TTD] VPN Edge Authentication Bypass and Ransomware-Linked Remote Access Exposure
Research by Edward 'Tony' Dolley
June 1, 2026 [EXP] Windows Netlogon Remote Code Execution and Domain Controller Compromise Exposure
Research by Edward 'Tony' Dolley
May 27, 2026 [EXP] ASP.NET ViewState Deserialization and Shared MachineKey Exploitation Path
Research by Edward 'Tony' Dolley
May 22, 2026 [EXP] Drupal Core PostgreSQL Injection Exploitation Path
Research by Edward 'Tony' Dolley
May 20, 2026 [EXP] NGINX Rift Exploit Path Against Internet-Facing Reverse Proxy and Web Infrastructure
Research by Edward 'Tony' Dolley
May 19, 2026 [EXP] Copy Fail Coverage Update Fragnesia, Linux Kernel Privilege Escalation, and Cloud Workload Trust Exposure
Research by Edward 'Tony' Dolley
May 14, 2026 [EXP] Cisco Catalyst SD-WAN Controller Authentication Bypass Enables Rogue Peering and Administrative Control
Research by Edward 'Tony' Dolley
May 14, 2026 [EXP] Behavioral Detection for Windows Recovery Path Abuse
Research by Edward 'Tony' Dolley
May 13, 2026 [CVE] VMware Spring AI Remote Code Execution via Prompt Injection (CVE-2026-22738), Amended Detection Readiness Edition
Research by Edward 'Tony' Dolley
May 13, 2026 Behavior Sequence Evaluation Across User Sessions Sequence-Based Detection Training
Research by Edward 'Tony' Dolley
May 12, 2026 [EXP] ShinyHunters’ European Commission Data Breach Sensitive Data Exposure — Education SaaS / Canvas Continuity Update
Research by Edward 'Tony' Dolley
May 9, 2026 [EXP] Ollama AI Infrastructure Exposure Memory Disclosure Risk in Self-Hosted Model Servers
Research by Edward 'Tony' Dolley
May 7, 2026 [EXP] Active Exploitation of MDM and Enterprise Management Control Planes
Research by Edward 'Tony' Dolley
May 6, 2026 [EXP] Active Exploitation of PAN-OS User-ID Authentication Portal for Edge Firewall Compromise CVE-2026-0300
Research by Edward 'Tony' Dolley
May 2, 2026 [CVE] From Foothold to Root: Copy Fail and the Linux Cloud Escalation Risk
Research by Edward 'Tony' Dolley
May 1, 2026 [EXP] VECT Ransomware-Wiper Operational Risk Report
Research by Edward 'Tony' Dolley
April 28, 2026 [CVE] Pre-Authentication Injection Against Internet-Exposed AI Gateway Infrastructure
Research by Edward 'Tony' Dolley
April 22, 2026 [EXP] ShinyHunters’ European Commission Data Breach Sensitive Data Exposure
Research by Edward 'Tony' Dolley
April 20, 2026 [SUP] Vercel Supply Chain Breach via AI Tool–Driven OAuth Compromise
Research by Edward 'Tony' Dolley
April 19, 2026 [MAL] Detection Strategy Overview Dragon Boss Signed Adware (Unidentified Malware)
Research by Edward 'Tony' Dolley
April 17, 2026 [EXP] Detection Strategy for AI-Accelerated Mass Exploitation Operations
Research by Edward 'Tony' Dolley
April 16, 2026 [EXP] Actively Exploited Apache ActiveMQ RCE (CVE-2026-34197)
Research by Edward 'Tony' Dolley
April 16, 2026 Why Identity Has Become the Primary Attack Surface
Research by Edward 'Tony' Dolley
April 14, 2026 [EXP] Microsoft April 2026 Zero-Day Exploitation Risk Analysis
Research by Edward 'Tony' Dolley
April 11, 2026 [CVE] CVE-2026-34621 Adobe Acrobat Zero-Day Remote Code Execution Actively Exploited
Research by Edward 'Tony' Dolley
April 9, 2026 [RAN] Ransomware Ecosystem Expansion and Affiliate Cartelization
Research by Edward 'Tony' Dolley
April 9, 2026 CyberDax Detection Companion
Research by Edward 'Tony' Dolley
April 9, 2026 CyberDax Heuristic Threat Hunting Foundations
Research by Edward 'Tony' Dolley
April 8, 2026 [SUP] TrueConf Trusted Update Channel Compromise (CVE-2026-3502)
Research by Edward 'Tony' Dolley
April 7, 2026 [CVE] Fortinet FortiClient EMS Unauthenticated Remote Code Execution Under Active Exploitation
Research by Edward 'Tony' Dolley
April 6, 2026 [APT] Iranian State-Aligned Identity Intrusion Campaign
Research by Edward 'Tony' Dolley
April 2, 2026 [CVE] CVE-2026-5281 Pre-Authentication RCE Enabling Unauthenticated Initial Access via Network Input Handling Flaw
Research by Edward 'Tony' Dolley
March 30, 2026 [CVE] Oracle Fusion Middleware Unauthenticated Remote Code Execution CVE-2026-21992
Research by Edward 'Tony' Dolley
March 29, 2026 [CVE] VMware Spring AI Remote Code Execution via Prompt Injection (CVE-2026-22738)
Research by Edward 'Tony' Dolley
March 26, 2026 [CVE] CVE-2026-3055 Citrix NetScaler ADC Memory Disclosure Unauthenticated Edge Exploitation
Research by Edward 'Tony' Dolley
March 24, 2026 Rules from EXP DarkSword Exploit Framework Multi-Stage Exploitation and Malware Delivery Platform
Research by Edward 'Tony' Dolley
March 24, 2026 [EXP] DarkSword Exploit Framework Multi-Stage Exploitation and Malware Delivery Platform
Research by Edward 'Tony' Dolley
March 23, 2026 [CVE] Authenticated Command Injection in Comfast CF-AC100 Management Interface Allowing Device Command Execution (CVE-2026-4468)
Research by Edward 'Tony' Dolley
March 20, 2026 [CVE] Cisco FMC CVE-2026-20131 and CVE-2026-20130 Actively Exploited Remote Code Execution update from March 6, 2026
Research by Edward 'Tony' Dolley
March 18, 2026 [EXP] The Shift to Behavioral and Identity-Driven Attacks and Why SIEM Detection Fails
Research by Edward 'Tony' Dolley
March 17, 2026 [EXP] The Shift from Malware Delivery to Identity Intrusion in Modern Enterprise Attacks
Research by Edward 'Tony' Dolley
March 16, 2026 IDN Storm-1811 Identity Intrusion Campaign Abusing Microsoft Teams Social Engineering and Quick Assist Remote Access
Research by Edward 'Tony' Dolley
March 15, 2026 Microsoft Windows Routing and Remote Access Service Remote Code Execution Vulnerabilities (KB508497)
Research by Edward 'Tony' Dolley
March 13, 2026 Chrome Zero-Day Pair (CVE-2026-3909, CVE-2026-3910) Enables Remote Browser Exploitation via Skia Memory Corruption and V8 Engine Flaws
Research by Edward 'Tony' Dolley
March 12, 2026 Credential Theft Campaign Assessment BlackSanta Intrusion Activity
Research by Edward 'Tony' Dolley
March 12, 2026 Handala Wiper Attack Disrupts Stryker Global Medical Technology Infrastructure
Research by Edward 'Tony' Dolley
March 10, 2026 CVE-2026-21514 and CVE-2026-21513 Microsoft Office MSHTML Trust Boundary Bypass Enables Phishing-Based Initial Access Chain
Research by Edward 'Tony' Dolley
March 10, 2026 CVE-2026-1603 Administrative Credential Exposure Risk in Enterprise Management Infrastructure
Research by Edward 'Tony' Dolley
March 6, 2026 CVE-2026-20079 and CVE-2026-20131 Cisco Secure Firewall Management Center Authentication Bypass and Remote Code Execution Vulnerabilities
Research by Edward 'Tony' Dolley
March 6, 2026 ANGLE Integer Overflow in Google Chrome Enables Potential Browser Memory Corruption Through Malicious Web Content (CVE-2026-3536)
Research by Edward 'Tony' Dolley
March 4, 2026 CVE-2026-2256 MS-Agent Prompt Injection Command Execution Exposure
Research by Edward 'Tony' Dolley
March 3, 2026 CVE-2026-21385 Qualcomm Display Driver Memory Corruption Zero-Day in Active Targeted Exploitation
Research by Edward 'Tony' Dolley
February 28, 2026 Grid Tide (GRIDTIDE) Global Espionage Campaign Leveraging Google Sheets API for Command and Control (UNC2814)
Research by Edward 'Tony' Dolley
February 27, 2026 CVE-2026-20127 Cisco Catalyst SD-WAN Manager and Controller Authentication Bypass Vulnerability Actively Exploited in the Wild
Research by Edward 'Tony' Dolley
February 26, 2026 UAT-10027 Dohdoor Backdoor – Cloudflare DNS over HTTPS Command and Control Campaign
Research by Edward 'Tony' Dolley
February 25, 2026 CVE-2026-21852 Claude Code Pre-Trust Configuration Injection Enabling API Credential Exfiltration
Research by Edward 'Tony' Dolley
February 24, 2026 Mercenary Akula (UAC-0050) Judicial-Themed Spearphishing Deploying RMS Against a European Financial Institution
Research by Edward 'Tony' Dolley
February 24, 2026 CVE-2026-20045 Cisco Unified Communications Unauthenticated Remote Code Execution
Research by Edward 'Tony' Dolley
February 23, 2026 Keenadu Android Backdoor – Mobile Credential Theft and Persistent Device Control
Research by Edward 'Tony' Dolley
February 21, 2026 CVE-2026-26119 Improper Authentication Privilege Escalation in Microsoft Windows Admin Center
Research by Edward 'Tony' Dolley
February 18, 2026 Active Exploitation of Dell RecoverPoint for Virtual Machines Hardcoded Credential Vulnerability CVE-2026-22769
Research by Edward 'Tony' Dolley
February 18, 2026 Graphalgo Fake Recruiter Dev Tasks Seeding Malicious npm and PyPI Dependencies
Research by Edward 'Tony' Dolley
February 16, 2026 CVE-2026-2441 Chrome Use-After-Free Zero-Day Actively Exploited
Research by Edward 'Tony' Dolley
February 12, 2026 Apple dyld Memory Corruption Leading to Arbitrary Code Execution (Exploited in the Wild) CVE-2026-20700
Research by Edward 'Tony' Dolley
February 12, 2026 CVE-2026-20841 Windows Notepad App Remote Code Execution via Markdown Link Handling
Research by Edward 'Tony' Dolley
February 11, 2026 Deepfake Zoom ClickFix UNC1069 macOS Crypto Credential and Session Theft
Research by Edward 'Tony' Dolley
February 11, 2026 Hackers Actively Scanning for BeyondTrust RCE Exploit CVE-2026-1731
Research by Edward 'Tony' Dolley
February 10, 2026 Phorpiex “Your Document” LNK Phishing leads to GLOBAL GROUP Ransomware
Research by Edward 'Tony' Dolley
February 10, 2026 Microsoft Feb 2026 “ Six Actively Exploited Zero-Days” (Windows/Office)
Research by Edward 'Tony' Dolley
February 10, 2026 Defense Industrial Base Supply-Chain Targeting via Hiring, Contractor Onboarding, and Direct-to-Individual Tradecraft
Research by Edward 'Tony' Dolley
February 9, 2026 Notepad++ Update Infrastructure Hijack delivering Chrysalis (Lotus Blossom)
Research by Edward 'Tony' Dolley
February 8, 2026 Conduent Data Breach - Ransomware Incident (safepay)
Research by Edward 'Tony' Dolley
February 7, 2026 CVE-2025-8088 WinRAR Startup Traversal Exploitation for Espionage and Backdoor Deployment
Research by Edward 'Tony' Dolley
February 5, 2026 BOD 26-02 Mitigating Risk From End-of-Support Edge Devices
Research by Edward 'Tony' Dolley
February 5, 2026 Interlock Ransomware "Hotta Killer" BYOVD Campaign
Research by Edward 'Tony' Dolley
February 5, 2026 CVE-2026-25140 Chainguard apko Supply Chain Vulnerability
Research by Edward 'Tony' Dolley
February 4, 2026 CVE-2025-40551 SolarWinds Web Help Desk Exploitation
Research by Edward 'Tony' Dolley
February 3, 2026 CVE-2026-25253 OpenClaw / Moltbot “1-Click RCE” via token exfil + CSWSH
Research by Edward 'Tony' Dolley
February 2, 2026 AI-Led Reconnaissance & Ransomware (Generic Auto Sector)
Research by Edward 'Tony' Dolley
February 2, 2026 Notepad++ Update Hijack
Research by Edward 'Tony' Dolley
January 30, 2026 Ghidra-themed macOS Crimeware Campaign (AMOS-lineage)
Research by Edward 'Tony' Dolley
January 30, 2026 CVE-2025-15467 OpenSSL CMS AuthEnvelopedData AEAD IV stack overflow
Research by Edward 'Tony' Dolley
January 29, 2026 CVE-2026-1281 Ivanti Endpoint Manager Mobile Code Injection Vulnerability
Research by Edward 'Tony' Dolley
January 29, 2026 eScan Antivirus Update Infrastructure Compromise
Research by Edward 'Tony' Dolley
January 28, 2026 Mustang Panda (COOLCLIENT) Espionage
Research by Edward 'Tony' Dolley
January 27, 2026 CVE-2026-24858 Improper access control in Fortinet FortiAnalyzer FortiCloud SSO authentication bypass
Research by Edward 'Tony' Dolley
January 27, 2026 CVE-2025-69263 PNPM Lockfile Integrity Bypass
Research by Edward 'Tony' Dolley
January 27, 2026 Multi-Stage Amnesia malware Campaign
Research by Edward 'Tony' Dolley
January 27, 2026 PackageGate (JavaScript Ecosystem Supply Chain Attacks)
Research by Edward 'Tony' Dolley
January 26, 2026 CVE-2026-23760 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability
Research by Edward 'Tony' Dolley
January 26, 2026 Sandworm's DynoWiper Attack on Poland's Power Grid
Research by Edward 'Tony' Dolley
January 26, 2026 CVE-2026-21509 Microsoft Office Security Feature Bypass
Research by Edward 'Tony' Dolley
January 26, 2026 Lazarus Group "Fake Font" (Contagious Interview)
Research by Edward 'Tony' Dolley
January 26, 2026 EmEditor Watering Hole Attack
Research by Edward 'Tony' Dolley
January 25, 2026 CVE-2026-24061 GNU InetUtils Telnetd Legacy Protocol Exploitation
Research by Edward 'Tony' Dolley
January 22, 2026 KONNI Developer Phishing (AI-Enhanced Backdoor)
Research by Edward 'Tony' Dolley
January 22, 2026 Osiris Ransomware New Strain
Research by Edward 'Tony' Dolley
January 21, 2026 CVE-2026-20045 Cisco Unified Communications Products Code Injection Vulnerability
Research by Edward 'Tony' Dolley
January 21, 2026 LastPass Impersonation Phishing
Research by Edward 'Tony' Dolley
January 20, 2026 CVE-2025-60021 critical remote command injection vulnerability in Apache bRPC
Research by Edward 'Tony' Dolley
January 20, 2026 CVE-2025-24085 Apple WebKit/Safari Active Zero Day
Research by Edward 'Tony' Dolley
January 20, 2026 PDFSider Malware - DLL Sideloading Supply Chain Campaign
Research by Edward 'Tony' Dolley
January 19, 2026 Ingram Micro Ransomware Breach
Research by Edward 'Tony' Dolley
January 19, 2026 “Evelyn Stealer “ Targeting Software Developers via VS Code
Research by Edward 'Tony' Dolley
January 19, 2026 CrashFix - Malicious Chrome Extension targeting Corporate Environments
Research by Edward 'Tony' Dolley
January 18, 2026 Boto Cor-de-Rosa (WhatsApp Web Banking Trojan)
Research by Edward 'Tony' Dolley
January 17, 2026 CVE-2025-64155 Critical OS command injection vulnerability in Fortinet FortSIEM
Research by Edward 'Tony' Dolley
January 17, 2026 CVE-2026-0227 Critical DOS Vulnerability Palo Alto Networks PAN-OS
Research by Edward 'Tony' Dolley
January 16, 2026 DataByCloud Campaign (malware extensions)
Research by Edward 'Tony' Dolley
January 16, 2026 GootLoader Evasion via Massive ZIP Concatenation
Research by Edward 'Tony' Dolley
January 16, 2026 CVE-2026-23550 Modular DS WordPress Plugin Authentication Bypass
Research by Edward 'Tony' Dolley
January 16, 2026 China-linked APT UAT-8837 Targets Critical Infrastructure via Sitecore Zero-Day
Research by Edward 'Tony' Dolley
January 15, 2026 Karma (MedusaLocker) Encryptionless Extortion
Research by Edward 'Tony' Dolley
January 14, 2026 PluggyApe Malware Targeting Ukrainian Defense Forces
Research by Edward 'Tony' Dolley
January 13, 2026 Microsoft CVE-2026-20805 and chained CVE-2026-20871 reportedly exploited in the wild
Research by Edward 'Tony' Dolley
January 13, 2026 Silver Fox APT (Microsoft Teams Lures)
Research by Edward 'Tony' Dolley
January 13, 2026 VoidLink Linux Malware Framework
Research by Edward 'Tony' Dolley
January 13, 2026 Multi-Stage Remcos RAT Delivery
Research by Edward 'Tony' Dolley
January 12, 2026 Multiple Trend Micro Apex Central Vulnerabilities released
Research by Edward 'Tony' Dolley
January 12, 2026 Kimsuky APT Quishing Attacks
Research by Edward 'Tony' Dolley
January 9, 2026 Midnight Blizzard (Microsoft Email Compromise Follow-on Activity)
Research by Edward 'Tony' Dolley
January 9, 2026 CVE-2026-21858 and CVE-2026-21877 Ni8mare Flaw in n8n Automation Tool (Disclosure and Alert)
Research by Edward 'Tony' Dolley
January 7, 2026 CVE-2025-37164 HPE OneView Remote Code Execution
Research by Edward 'Tony' Dolley
January 7, 2026 CVE-2026-0625 D-Link Discontinued Devices
Research by Edward 'Tony' Dolley
January 7, 2026 Sedgwick Government Solutions Ransomware Incident (linked to TridentLocker)
Research by Edward 'Tony' Dolley
January 6, 2026 CVE-2025-68668 exploitation of n8n Python Code Node Flaw
Research by Edward 'Tony' Dolley
January 5, 2026 Romanian Water & Energy Authorities Ransomware Attacks
Research by Edward 'Tony' Dolley
January 5, 2026 EmEditor Software Supply Chain Attack Recap
Research by Edward 'Tony' Dolley
January 5, 2026 PHALT#BLYX Campaign Targeting Hospitality
Research by Edward 'Tony' Dolley
January 2, 2026 CVE-2025-36918 Windows MSHTML Platform RCE
Research by Edward 'Tony' Dolley
January 2, 2026 XSpeeder SXZOS Firmware RCE CVE-2025-54322
Research by Edward 'Tony' Dolley
January 1, 2026 DarkSpectre Browser Extension Campaigns
Research by Edward 'Tony' Dolley
December 31, 2025 Iranian APT 'Prince of Persia' Deploying New Malware Strains
Research by Edward 'Tony' Dolley
December 31, 2025 Probe Portal browser Hijacker
Research by Edward 'Tony' Dolley
December 30, 2025 CVE-2025-52691 SmarterMail Critical RCE Vulnerability Alert
Research by Edward 'Tony' Dolley
December 29, 2025 Shai-Hulud 3.0 NPM Variant Supply Chain Attack
Research by Edward 'Tony' Dolley
December 29, 2025 Evasive Panda APT Activity (MgBot Backdoor via DNS Poisoning)
Research by Edward 'Tony' Dolley
December 29, 2025 MongoDB MongoBleed Exploitation CVE-2025-14847
Research by Edward 'Tony' Dolley
December 27, 2025 LangChain Core Vulnerability Exploitation CVE-2025-68664
Research by Edward 'Tony' Dolley
December 24, 2025 WebRAT Malware Distribution via Fake GitHub Exploits
Research by Edward 'Tony' Dolley
December 24, 2025 New Wave of Shai-Hulud Malware Campaign (NPM supply chain)
Research by Edward 'Tony' Dolley
December 24, 2025 MacSync Stealer Campaign
Research by Edward 'Tony' Dolley
December 23, 2025 CVE-2023-52163 Exploitation added to KEV list December 22, 2025
Research by Edward 'Tony' Dolley
December 22, 2025 WatchGuard Firebox Firewall RCE CVE-2025-14733
Research by Edward 'Tony' Dolley
December 22, 2025 Critical RCE in React Native Community CLI CVE-2025-11953
Research by Edward 'Tony' Dolley
December 18, 2025 SonicWall SMA 1000 Authorization Bypass CVE-2025-40602
Research by Edward 'Tony' Dolley
December 18, 2025 Active Exploitation of Cisco AsyncOS Zero-Day CVE-2025-20393
Research by Edward 'Tony' Dolley
December 17, 2025 WebKit/ANGLE Memory Corruption CVE-2025-14174
Research by Edward 'Tony' Dolley
December 17, 2025 Cellik Android RAT (Oct – Dec 2025)
Research by Edward 'Tony' Dolley
December 16, 2025 Russian GRU Campaign Targeting Western Critical Infrastructure
Research by Edward 'Tony' Dolley
December 16, 2025 Zero Day campaigns targeting Fortinet CVES CVE-2025-59718 and CVE-2025-59719
Research by Edward 'Tony' Dolley
December 16, 2025 Gentlemen Ransomware
Research by Edward 'Tony' Dolley
December 16, 2025
Research by Edward 'Tony' Dolley
December 15, 2025 Apple's WebKit CVE-2025-43529 actively exploited in targeted attacks
Research by Edward 'Tony' Dolley
December 15, 2025 Phantom Stealer (Operation MoneyMount-ISO)
Research by Edward 'Tony' Dolley
December 15, 2025 Google Chrome ANGLE Graphics Zero-Day CVE-2025-6558
Research by Edward 'Tony' Dolley
December 12, 2025 WIRTE APT (Ashen Lepus) Espionage
Research by Edward 'Tony' Dolley
December 11, 2025 GeoServer XXE Vulnerability CVE-2025-58360
Research by Edward 'Tony' Dolley
December 11, 2025 Google Chrome Zero-Day Campaign (Internal ID 466192044)
Research by Edward 'Tony' Dolley
December 11, 2025 NANOREMOTE Malware Using Google Drive API for C2
Research by Edward 'Tony' Dolley
December 11, 2025 PyStoreRAT Supply Chain Malware Campaign
Research by Edward 'Tony' Dolley
December 11, 2025 Marquis Software Ransomware Incident
Research by Edward 'Tony' Dolley
December 10, 2025 Gogs Zero-Day Exploitation CVE-2025-8110
Research by Edward 'Tony' Dolley
December 10, 2025 Microsoft Windows Cloud Files Mini Filter Driver EoP CVE-2025-62221
Research by Edward 'Tony' Dolley
December 10, 2025 Storm-0900 XWorm Phishing Campaign
Research by Edward 'Tony' Dolley
December 10, 2025 WinRAR Path Traversal CVE-2025-6218
Research by Edward 'Tony' Dolley
December 9, 2025 D-Link Router Exploitation
Research by Edward 'Tony' Dolley
December 9, 2025 Array Networks ArrayOS AG Exploitation CVE-2025-66644
Research by Edward 'Tony' Dolley
December 9, 2025 North Korean Social Engineering targeting macOS
Research by Edward 'Tony' Dolley
December 9, 2025 Rapid ShadowPad Deployment via WSUS Vulnerability
Research by Edward 'Tony' Dolley
December 8, 2025 CVE-2024-3721 TBK DVR Command Injection
Research by Edward 'Tony' Dolley
December 4, 2025 React2Shell / RSC Deserialization Attacks
Research by Edward 'Tony' Dolley
December 4, 2025 Windows LNK Flaw Campaign (CVE-2025-9491)
Research by Edward 'Tony' Dolley
December 4, 2025 OpenPLC ScadaBR Cross-site Scripting Vulnerability(Update on Active Exploitation)
Research by Edward 'Tony' Dolley
December 4, 2025 Iran-Linked Hackers Deploy New MuddyViper Backdoor
Research by Edward 'Tony' Dolley
December 4, 2025 Google Android Framework Vulnerabilities
Research by Edward 'Tony' Dolley
December 4, 2025 Salesforce-Gainsight Data Breach
Research by Edward 'Tony' Dolley
December 4, 2025 ValleyRAT Job Seeker Campaign
Research by Edward 'Tony' Dolley
December 4, 2025 NotePad++ malicious AutoUpdate
Research by Edward 'Tony' Dolley