Opens in a new tab
PHP2Shell: Critical RCE Vulnerability

Security Practitioner

SEARCH

CATEGORIES

Filter - Checkbox

TAGS

Filter - Checkbox

    From Evidence to Action: Scaling CTEM Across the Enterprise

    In this webinar, Ellen Sundra, VP, Customers at Horizon3; and Dan DeCloss, Chief Customer Officer at Brinqa, will explore how unified exposure data, attacker-derived evidence, business context, and remediation orchestration can transform proof into prioritized, coordinated action.

    CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE

    October 20, 2026
    Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes and remote code execution, along with indicators of compromise for defenders.

    From Assumptions to Evidence: Why Validation Is the Heart of CTEM

    In this webinar, we'll explore why validation has become one of the most important phases of CTEM, how organizations can move from assumptions to evidence, and why proof is often the difference between debating a finding and taking action.
    Why validation is at the heart of Continuous Threat Exposure Management

    Meeting the ECB’s AI-Enabled Cybersecurity Supervisory Recommendations with NodeZero®

    October 16, 2026
    Explore how NodeZero autonomous penetration testing connects application, cloud, identity, and infrastructure weaknesses into validated attack paths, helping banks prioritize remediation and build evidence for the ECB’s cybersecurity supervisory recommendations.
    Mockup of the ECB cybersecurity solution brief showing the cover and two NodeZero attack-path walkthrough pages.

    AI Changed the Economics of Cyberattacks

    October 9, 2026
    AI has changed the speed, scale, and economics of cyberattacks. Learn why modern security requires continuous exposure management built around evidence, informed action, and verified outcomes.
    AI Changed the Economics of Cyberattacks ebook cover

    Zammad CVE-2026-102489: Session Leak to RCE

    October 7, 2026
    Horizon3 reverse engineered CVE-2026-102489 in Zammad, reproduced the unauthenticated WebSocket session leak, traced the vulnerable code path, and demonstrated how a leaked admin session can lead to remote code execution.

    HacktoberFest: A Fireside Chat with Horizon3 & GuidePoint Security

    Continuous Validation, Real-World Risk, and Proving Security Impact Join top subject matter experts from Horizon3 and GuidePoint Security for a candid conversation on the evolving cybersecurity landscape and what organizations can do to strengthen their defenses.

    Horizon3 + CrowdStrike: Prove. Prioritize. Verify.

    October 2, 2026
    See how Horizon3 and CrowdStrike connect NodeZero exploitability intelligence with Falcon Next-Gen SIEM and Fusion SOAR to prove, prioritize, remediate, and verify exploitable risk.
    Horizon3 and CrowdStrike NodeZero integration

    What Security Metrics Actually Matter?

    October 1, 2026
    Security activity doesn’t always equal risk reduction. Learn how attack paths, business impact, verification, remediation speed, and recurrence can show whether CTEM is actually working.
    CTEM security metrics for measuring attack paths, impact reduction, verification, and recurrence

    Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS

    September 30, 2026
    Horizon3 researchers used Anthropic’s Mythos to uncover a chain of cryptographic weaknesses in Rejetto HFS, recover a predictable signing key, forge an admin session, and achieve remote code execution.
    Horizon3 vulnerability research using Anthropic Mythos to uncover remote code execution in Rejetto HFS