New at Horizon3

Horizon3 triples valuation to $2B with $250M Series E | Press Release →

Resource Center

Welcome to our cybersecurity resource center where we uncover how malicious actors exploit weaknesses in systems, while going beyond the technical aspects and examining real-world perspectives across various industries.

LATEST VULNERABILITIES

Bomb Streamline Icon: https://streamlinehq.com

CVE-2026-10520

CVE-2026-10520 is a critical pre-authenticated OS command injection vulnerability in Ivanti Sentry that allows remote attackers to execute arbitrary commands as root.
Read More →
Bomb Streamline Icon: https://streamlinehq.com

CVE-2026-0257

CVE-2026-0257 is a critical authentication bypass vulnerability in Palo Alto Networks PAN-OS GlobalProtect that allows unauthorized VPN access and is actively exploited in the wild.
Read More →

WEBINAR REPLAY

SEARCH

CATEGORIES

TAGS

SEARCH

    Blogs

    Mythos Didn’t Break Cybersecurity. It Exposed What Was Already Broken.

    April 17, 2026
    Mythos shows that finding vulnerabilities isn’t the problem—understanding exploitability and impact is what security teams are missing.
    Read More →
    Abstract visualization showing large volumes of vulnerabilities and data highlighting the gap between discovery and real-world exploitability
    Customer Stories

    Using Iranian Tradecraft to Eliminate a Critical AD Risk

    NodeZero uncovered and eliminated a Zerologon Active Directory attack path using Iranian tradecraft, validating remediation in under 24 hours.
    Read More →
    Vulnerabilities

    CVE-2026-21643

    April 15, 2026
    CVE-2026-21643 allows unauthenticated SQL injection in FortiClient EMS, enabling code execution. Patch immediately and validate exposure.
    Read More →
    CVE-2026-21643 attack path image
    Blogs

    From Patch Tuesday to Pentest Wednesday®: When “Clean” Didn’t Mean Secure

    April 15, 2026
    External tests looked clean—but internal pentesting revealed a full attack path to domain compromise despite active security controls.
    Read More →
    Pentest Wednesday banner featuring NodeZero and the Find-Fix-Verify security testing rhythm
    Vulnerabilities

    CVE-2026-20160

    April 8, 2026
    CVE-2026-20160 enables unauthenticated command execution in Cisco SSM On-Prem. Patch immediately and validate exposure.
    Read More →
    Attack path visualization showing unauthenticated API access leading to root-level command execution on Cisco Smart Software Manager On-Prem
    Blogs

    Incident Response Remediation: How to Eliminate Attack Paths After a Breach

    April 8, 2026
    Digital threat monitoring shows threats and exposure—but not whether attackers can exploit your environment. Here’s what matters next.
    Read More →
    Cybersecurity network visualization showing connected systems and threat monitoring across an external attack surface
    Attack Blogs, Attack Research, Blogs, Disclosures

    10 Minutes with Claude: Remote Code Execution in Apache ActiveMQ (CVE-2026-34197)

    April 7, 2026
    CVE-2026-34197 enables remote code execution in ActiveMQ via Jolokia. Exploitation chains VM transport and remote config loading.
    Read More →
    ActiveMQ vm transport exploitation showing creation of a broker and loading of attacker-controlled configuration
    Vulnerabilities

    CVE-2026-34197

    April 7, 2026
    CVE-2026-34197 allows code execution in ActiveMQ via Jolokia. Validate exposure, patch affected versions, and confirm remediation.
    Read More →
    Diagram showing exploitation of Apache ActiveMQ via Jolokia API leading to remote code execution through malicious configuration loading
    Vulnerabilities

    CVE-2026-35616

    April 6, 2026
    CVE-2026-35616 Fortinet FortiClient EMS Improper Access Control Vulnerability | Active Exploitation
    Read More →
    attack path for CVE-2026-25616
    Factsheets

    SLED U.S. State, Local, & Education

    April 4, 2026
    State, local and education (SLED) organizations have unique pain points. Because they rely on taxpayer dollars, SLED organizations are often trying to do more with less.
    Read More →