Resource Center

CVE-2026-21858, the so-called “Ni8mare” n8n RCE, drew significant attention—but real-world impact appears limited. Horizon3 breaks down the technical prerequisites, observed exposure, and why most organizations are unlikely to be affected.

MongoDB Server Uninitialized Heap Memory Disclosure (MongoBleed) | Active Exploitation

WatchGuard Fireware OS VPN Vulnerability | Active Exploitation

React Server Components RCE | Rapid Response

The DoW’s new Cybersecurity Risk Management Construct demands continuous, evidence-driven security. Learn how Horizon3’s NodeZero delivers real-time, attacker-validated proof to support mission resilience.

Sangoma FreePBX Authentication Bypass and Remote Code Execution Vulnerabilities

We dive into a new set of FreePBX issues beyond CVE-2025-57819: an authentication bypass in webserver mode (CVE-2025-66039), multiple SQL injections (CVE-2025-61675), and an arbitrary file upload bug leading to remote code execution (CVE-2025-61678). Together, they allow authenticated or unauthenticated attackers to achieve code execution on vulnerable FreePBX instances using risky auth settings. This write-up…

Patch Tuesday is a known event, but attackers are moving faster than ever. For a leading U.S. manufacturer, shifting from simple patching to continuous validation became the key to proving their fixes worked, turning uncertainty into confidence.

React Server Components RCE | Rapid Response

Horizon3 has been named a Customers’ Choice in the October 2025 Gartner® Peer Insights™ “Voice of the Customer”: Adversarial Exposure Validation report, reflecting strong peer satisfaction and real-world impact.