Resource Center
Welcome to our cybersecurity resource center where we uncover how malicious actors exploit weaknesses in systems, while going beyond the technical aspects and examining real-world perspectives across various industries.
LATEST VULNERABILITIES
CVE-2026-3324 allows authentication bypass in Log360 via exposed APIs. Patch affected builds and validate exposure.
Read More →CVE-2026-21643 allows unauthenticated SQL injection in FortiClient EMS, enabling code execution. Patch immediately and validate exposure.
Read More →WEBINAR REPLAY
SEARCH
CATEGORIES
TAGS
SEARCH
CATEGORIES
TAGS
Introducing Threat Informed Perspectives: A More Strategic Way to Measure Security Posture
Threat Informed Perspectives give organizations a structured, attacker-aligned way to measure exposure, track real security improvement, and validate remediation over time using continuous, evidence-driven insights from NodeZero.
Customer Data Handling Factsheet
November 25, 2025
At Horizon3, transparency and security go hand in hand. The NodeZero® Offensive Security Platform protects your data during every test — encrypting communications, limiting retention, and ensuring no sensitive data leaves your environment. Download the factsheet to see how our strict controls safeguard customer information from launch to teardown.
CVE-2025-61757
November 24, 2025
Oracle Identity Manager Pre-Auth RCE | CISA KEV
Endpoint Detection and Response: What It Is and How to Know Yours Is Working
November 24, 2025
EDR tools offer visibility, but visibility isn’t protection. Learn why credential-driven attacks often bypass EDR and how NodeZero validates real-world detection, blocking, and effectiveness across your endpoints.
Supercharging Enterprise AI with Real-World Exploitability Data: The NodeZero MCP Server Advantage
Learn how the NodeZero MCP Server supercharges enterprise AI ecosystems with attacker-validated exploitability data, continuous validation, and automated security workflows.
Prioritize What’s Proven: The NodeZero® Approach to Risk‑Based Vulnerability Management
November 18, 2025
Horizon3’s NodeZero® redefines Risk-Based Vulnerability Management by connecting exploitability, business context, and attacker behavior. With new capabilities for High-Value Targeting, Advanced Data Pilfering, Threat Actor Intelligence, and Vulnerability Risk Intelligence, NodeZero moves vulnerability management from noise to proof—helping security teams prioritize, fix, and verify what truly matters.
N-able N-central: From N-days to 0-days
Horizon3 discovered two critical vulnerabilities in N-able N-central — CVE-2025-9316 and CVE-2025-11700 — that can be chained to leak credentials and fully compromise the appliance. This in-depth analysis details how the flaws were found, exploited, responsibly disclosed, and patched in version 2025.4, turning N-days into true 0-days.
CVE-2025-64446
November 14, 2025
Fortinet FortiWeb Authentication Bypass via Path Traversal Vulnerability
CVE-2025-9316, CVE-2025-11700
November 13, 2025
N-able N-central Vulnerabilities
CVE-2025-12480
November 13, 2025
Gladinet Triofox Improper Access Control Vulnerability | Active Exploitation
