Resource Center

Welcome to our cybersecurity resource center where we uncover how malicious actors exploit weaknesses in systems, while going beyond the technical aspects and examining real-world perspectives across various industries.

LATEST VULNERABILITIES

Bomb Streamline Icon: https://streamlinehq.com

CVE-2025-57819

FreePBX Authentication Bypass RCE
Read More →
Bomb Streamline Icon: https://streamlinehq.com

CVE-2025-7776

Citrix Netscaler Memory Corruption Vulnerability
Read More →

WEBINAR REPLAY

SEARCH

CATEGORIES

TAGS

    From War Room to Board Room: Own the Narrative.

    May 19, 2025
    Regulatory pressure and shareholder expectations have created a duty to know — and to act. Static pentest reports no longer suffice.

    Using NodeZero® to Uncover the Paths Attackers Take, Before They Do

    May 2, 2025
    Discover how NodeZero emulates real attackers to uncover critical attack paths, escalate access, and deliver proof—fast and autonomously.

    Fireside Chat: Horizon3.ai and Quantum Marine Engineering

    DoD supply chain cyber threats are surging. Learn how CAPT helps suppliers find, fix & verify gaps with scalable, autonomous security testing.

    What Is Pentesting? The Ultimate Guide to Penetration Testing

    April 30, 2025
    Learn how pentesting goes beyond scans to validate real risk, meet compliance, and stay ahead of threats with Horizon3.ai’s ultimate guide.

    The Duty to Know: Why Security Leaders Can’t Afford Ignorance

    April 28, 2025
    Security leaders can’t afford blind spots. Learn why proving security effectiveness is now a must—and how to meet the Duty to Know.

    Demonstrating DORA Resilience in the Legal Sector

    April 24, 2025
    Discover how NodeZero® helps legal firms proactively reduce cyber risk with real-world attack simulation, identifying exploitable gaps and providing actionable insights to strengthen security.

    Why Adversarial Exposure Validation Belongs in Every CTEM Program

    April 24, 2025
    Discover why Adversarial Exposure Validation (AEV) is essential to any CTEM program. Learn how continuous, automated validation strengthens security, boosts red teaming, and proves real-world risk reduction.

    NodeZero® Release Recap: Spring Edition

    Watch Horizon3.ai PMs demo the latest NodeZero updates—from NodeZero Tripwires™ to NodeZero Insights™, AD cracking, and new external attack techniques.

    Key Insights from Over 50,000 NodeZero® Pentests Infographic

    April 10, 2025
    Key findings from Horizon3.ai’s Annual Insights Report, powered by NodeZero® data and a survey of 800+ CISOs and IT pros.

    Unsafe at Any Speed: Abusing Python Exec for Unauth RCE in Langflow AI

    April 9, 2025
    CVE-2025-3248 is a critical code injection vulnerability affecting Langflow, a popular tool used for building out agentic AI workflows. This vulnerability is easily exploitable and enables unauthenticated remote attackers to fully compromise Langflow servers. The issue is patched in Langflow 1.3.0.