Security Practitioner
SEARCH
CATEGORIES
TAGS
From Evidence to Action: Scaling CTEM Across the Enterprise
In this webinar, Ellen Sundra, VP, Customers at Horizon3; and Dan DeCloss, Chief Customer Officer at Brinqa, will explore how unified exposure data, attacker-derived evidence, business context, and remediation orchestration can transform proof into prioritized, coordinated action.
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
October 20, 2026
Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes and remote code execution, along with indicators of compromise for defenders.
From Assumptions to Evidence: Why Validation Is the Heart of CTEM
In this webinar, we'll explore why validation has become one of the most important phases of CTEM, how organizations can move from assumptions to evidence, and why proof is often the difference between debating a finding and taking action.
Meeting the ECB’s AI-Enabled Cybersecurity Supervisory Recommendations with NodeZero®
October 16, 2026
Explore how NodeZero autonomous penetration testing connects application, cloud, identity, and infrastructure weaknesses into validated attack paths, helping banks prioritize remediation and build evidence for the ECB’s cybersecurity supervisory recommendations.
AI Changed the Economics of Cyberattacks
October 9, 2026
AI has changed the speed, scale, and economics of cyberattacks. Learn why modern security requires continuous exposure management built around evidence, informed action, and verified outcomes.
Zammad CVE-2026-102489: Session Leak to RCE
October 7, 2026
Horizon3 reverse engineered CVE-2026-102489 in Zammad, reproduced the unauthenticated WebSocket session leak, traced the vulnerable code path, and demonstrated how a leaked admin session can lead to remote code execution.
HacktoberFest: A Fireside Chat with Horizon3 & GuidePoint Security
Continuous Validation, Real-World Risk, and Proving Security Impact Join top subject matter experts from Horizon3 and GuidePoint Security for a candid conversation on the evolving cybersecurity landscape and what organizations can do to strengthen their defenses.
Horizon3 + CrowdStrike: Prove. Prioritize. Verify.
October 2, 2026
See how Horizon3 and CrowdStrike connect NodeZero exploitability intelligence with Falcon Next-Gen SIEM and Fusion SOAR to prove, prioritize, remediate, and verify exploitable risk.
What Security Metrics Actually Matter?
October 1, 2026
Security activity doesn’t always equal risk reduction. Learn how attack paths, business impact, verification, remediation speed, and recurrence can show whether CTEM is actually working.
Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS
September 30, 2026
Horizon3 researchers used Anthropic’s Mythos to uncover a chain of cryptographic weaknesses in Rejetto HFS, recover a predictable signing key, forge an admin session, and achieve remote code execution.







