Resource Center

CVE-2025-40551: Another Solarwinds Web Help Desk Deserialization Issue

January 28, 2026

CVE-2025-40551 details multiple chained vulnerabilities in SolarWinds Web Help Desk that allow unauthenticated attackers to achieve remote code execution on vulnerable instances.

NodeZero dashboard view showing autonomous pentesting results and attack paths

Attack Blogs, Attack Paths, Attack Research

Defending with AD Tripwires: GOAD Walkthrough

January 26, 2026

This walkthrough shows how AD Tripwires turn quiet Active Directory reconnaissance into deterministic, low-noise detections. Using a GOAD (Game of Active Directory) environment, we demonstrate how exposed-credentials, Kerberoasting, and AS-REP Roasting tripwire accounts surface attacker behavior early in the attack path—mapping real techniques to Windows Security Events and platform alerts so defenders can see exactly…

Diagram showing attacker touching tripwire accounts, Domain Controller writing Windows events, AD Tripwires generating alerts, and Security Information and Event Management (SIEM)/Endpoint Detection and Response (EDR) notifying analysts.

Vulnerabilities

CVE-2026-24061

January 26, 2026

GNU InetUtils telnetd Authentication Bypass Vulnerability

Diagram illustrating unauthenticated root access via the GNU InetUtils telnetd authentication bypass (CVE-2026-24061)

Attack Blogs, Disclosures

Ticket to Shell: Exploiting PHP Filters and CNEXT in osTicket (CVE-2026-22200)

January 22, 2026

CVE-2026-22200 is a severe vulnerability affecting osTicket, a popular open source helpdesk and ticketing system. This vulnerability enables anonymous attackers to read arbitrary files from the osTicket server, and in some cases execute arbitrary code. This issue is patched in osTicket 1.18.3 / 1.17.7.

NodeZero platform screenshot showing autonomous pentesting results and attack paths

Attack Blogs, Attack Research

Beyond the Perimeter: Why Deception is Critical to Protecting the World’s Most Sensitive Organisations

January 21, 2026

Insights from the UK NCSC Active Cyber Defence trials reveal why cyber deception, Tripwires, and attacker-centric defense are critical for protecting highly sensitive organisations.

Blogs

Introducing NodeZero® High-Value Targeting: Think Like an Attacker, Prioritize What Matters

January 20, 2026

High-Value Targeting (HVT) analyzes and prioritizes systems and accounts based on business impact, replicating how sophisticated attackers identify and prioritize targets after establishing initial access. It identifies domain controllers, privileged accounts, and critical infrastructure, directing NodeZero to test the most critical attack paths first. As NodeZero discovers new systems, credentials, and network relationships, HVT continuously…

High-value targeting workflow showing reconnaissance data analyzed by AI to prioritize critical assets

Vulnerabilities

CVE-2025-11250

January 15, 2026

ManageEngine ADSelfService Plus Authentication Bypass

Attack path showing authentication bypass in ManageEngine ADSelfService Plus (CVE-2025-11250)

Vulnerabilities

CVE-2025-37164

January 14, 2026

HPE OneView Remote Code Execution Vulnerability | CISA KEV

HPE OneView CVE-2025-37164 remote code execution attack path visualization

Blogs

From Patch Tuesday to Pentest Wednesday®: When Proving Compliance Becomes Cyber Resilience

January 14, 2026

A Pentest Wednesday® story showing how one of the world’s largest payments providers replaced point-in-time compliance testing with continuous, attacker-aligned validation.