New at Horizon3.ai

Resource Center

Welcome to our cybersecurity resource center where we uncover how malicious actors exploit weaknesses in systems, while going beyond the technical aspects and examining real-world perspectives across various industries.

LATEST VULNERABILITIES

Bomb Streamline Icon: https://streamlinehq.com

CVE-2026-10520

CVE-2026-10520 is a critical pre-authenticated OS command injection vulnerability in Ivanti Sentry that allows remote attackers to execute arbitrary commands as root.
Read More →
Bomb Streamline Icon: https://streamlinehq.com

CVE-2026-0257

CVE-2026-0257 is a critical authentication bypass vulnerability in Palo Alto Networks PAN-OS GlobalProtect that allows unauthorized VPN access and is actively exploited in the wild.
Read More →

SEARCH

CATEGORIES

TAGS

SEARCH

    CVE-2026-48558: SimpleHelp Authentication Bypass Indicators of Compromise

    June 12, 2026
    Horizon3.ai details indicators of compromise, affected configurations, and mitigation guidance for CVE-2026-48558, a SimpleHelp OIDC authentication bypass vulnerability.

    AI-Powered Exploit Generation: Speed, Scale & Cyber Risk

    Learn how AI-powered exploit generation collapses the discovery-to-impact gap, accelerates attack chains, and why exploitability-first validation is now essential.

    Autonomous Penetration Testing: The Buyer’s Decision Guide

    Compare autonomous pentesting vs. scanners, BAS, and traditional pentests. Learn what to evaluate, what the limits are, and how to run a proof of value.

    Patch Tuesday to Pentest Wednesday: How a Global Investment Firm Reduced Security Surprises

    June 10, 2026
    A global investment firm used NodeZero® to reduce attack-path impacts from 251 to 0, eliminate compromised credentials, and build a continuous security validation program across 18 locations.

    Claude Mythos & Enterprise Security: Your Questions Answered

    What is Claude Mythos and how does it affect enterprise security? Get clear answers on exploitability, attack paths, and how to respond with NodeZero.

    The First AI State-Sponsored Attack: What It Means for Defenders

    In November 2025, Anthropic disclosed the first AI-orchestrated state-sponsored cyberattack. Here's what GTG-1002 actually changes for security teams.

    The Exploit Window Is Shrinking. Most Security Workflows Are Not.

    June 1, 2026
    AI is accelerating vulnerability discovery and attacker weaponization. Learn how Rapid Response helps organizations validate exposure, reduce uncertainty, and close the exploit window faster.

    Rapid Response

    May 29, 2026
    Rapid Response enables organizations to quickly determine which emerging vulnerabilities create real exploitability risk, prioritize remediation, and verify fixes before attackers operationalize threats.

    AI Has Ideas. sqlmap Has Receipts.

    May 29, 2026
    AI can identify potential SQL injection opportunities, but deterministic validation is what builds trust. Learn how NodeZero® combines LLM-guided discovery with sqlmap to deliver high-confidence findings.

    Third-Party Risk Management

    May 27, 2026
    NodeZero for TPRM: NodeZero proactively secures your supply chain by replacing assumptions with proof. It empowers you to find, fix, and validate third-party risks before they disrupt your business.