Resource Center
Welcome to our cybersecurity resource center where we uncover how malicious actors exploit weaknesses in systems, while going beyond the technical aspects and examining real-world perspectives across various industries.
LATEST VULNERABILITIES
Fortinet FortiSIEM Arbitrary File Write Remote Code Execution Vulnerability
Read More →WEBINAR REPLAY
SEARCH
CATEGORIES
TAGS
SEARCH
CATEGORIES
TAGS
NodeZero® Release Recap: Spring Edition
Watch Horizon3 PMs demo the latest NodeZero updates—from NodeZero Tripwires™ to NodeZero Insights™, AD cracking, and new external attack techniques.
Key Insights from Over 50,000 NodeZero® Pentests Infographic
April 10, 2025
Key findings from Horizon3’s Annual Insights Report, powered by NodeZero® data and a survey of 800+ CISOs and IT pros.
Unsafe at Any Speed: Abusing Python Exec for Unauth RCE in Langflow AI
April 9, 2025
CVE-2025-3248 is a critical code injection vulnerability affecting Langflow, a popular tool used for building out agentic AI workflows. This vulnerability is easily exploitable and enables unauthenticated remote attackers to fully compromise Langflow servers. The issue is patched in Langflow 1.3.0.
Speed Through Uncertainty: The Find, Fix, Verify Loop for Exposure Management
See how autonomous pentesting with NodeZero helps you find, fix, and verify cyber risks fast—no more waiting weeks for answers.
NodeZero® Release Recap: Spring Edition
April 7, 2025
Spring updates are here! Explore NodeZero’s latest threat detection, pentest, and insights features—built to stay ahead of attackers.
There’s More To Our Annual Report: The State of Cybersecurity in 2025
April 2, 2025
Discover hidden cybersecurity risks from our 2025 report. Unfiltered insights on BAS, compliance pitfalls, third-party threats & more.
CrushFTP Authentication Bypass: Indicators of Compromise
March 27, 2025
CrushFTP auth bypass (CVE-2025-2825) could grant attackers admin access. Learn IoCs & test exposure with NodeZero. Patch now!
CVE-2025-1974
March 26, 2025
Kubernetes Ingress NGINX Remote Code Execution Vulnerability
