Category desk

Research

Technical deep dives, reproducible tests, and tool evaluations.

Editorial illustration of a Microsoft Defender privilege-escalation race condition elevated after CISA KEV listing for ransomware use

BlueHammer Zero-Day Microsoft Defender Flaw Escalates to Ransomware Priority After CISA KEV Listing

BlueHammer is a time-of-check to time-of-use race, not memory corruption. Estates below Antimalware Platform 4.18.26030.3011 face an operational deadline.

Editorial illustration of identity-based ransomware entry via compromised credentials leading toward domain compromise

Ransomware Research

Compromised Credentials Overtake Vulnerabilities as Primary Ransomware Entry Point

Across 661 incident-response cases, 67 percent of root causes were identity-related — a decisive shift in where ransomware defence budgets should now sit.

Editorial illustration of a third-party data-center document leak tied to Kudankulam Balance-of-Plant engineering files.

Third Party Risk Management Research

Kudankulam Nuclear Data Leak Exposes Third-Party Vulnerability in India’s Critical Energy Supply Chain

Reactor core systems were untouched, but a multi-tenant engineering document store became a single point of failure for the Kudankulam project's supplier graph.

Editorial illustration of a finance video call where multiple photorealistic participants look subtly synthetic while an employee authorizes a high-value payment

Mfa Bypass Research

Deepfake Phishing MFA Bypass: How Real-Time Voice-Video Fraud Defeats Video KYC and Conventional Authentication

When every participant on the call except the victim is synthetic, conventional MFA and human verification stop being controls. Assurance has to move upstream.

Connected IoT hardware with EU Cyber Resilience Act dual compliance milestones for September 2026 reporting and December 2027 CE marking

Cyber Resilience Act Research

EU Cyber Resilience Act 2026 Compliance for IoT: The September Reporting Deadline That Changes Market Access

September 2026 is not full CE compliance. It is the first continuous, enforceable duty to detect and report actively exploited vulnerabilities.

Dossier-style briefing poster summarizing the July 2026 Accenture Azure DevOps breach: roughly 35 GB stolen, ~87 applications and 56 environment credential files exposed, with cascade paths from provider ADO to client tenants via PATs, storage keys and committed secrets.

Accenture Azure Devops Breach Research

Accenture Azure DevOps Breach 2026 Exposes Supply Chain Risk Through Leaked Source Code and Credentials

Accenture confirms an isolated Azure DevOps breach after 35GB of source code, PATs, keys and credentials were listed for sale—raising major supply-chain risk for clients.

Illustration of AI-generated code being accepted into production while supply-chain package risks light up in red.

Ai Code Generation Research

AI-Generated Code Vulnerabilities Surge as ‘Vibe Coding’ Ships Unvetted Slop Into Production

Authorization gaps, hard-coded secrets and invented package names are reaching production repositories faster than human review can absorb them.

Illustration of ephemeral workload credentials replacing long-lived API keys in non-human identity management

Identity Research

Non-Human Identity Management: Why Ephemeral Credentials Are Replacing Static API Keys

Service accounts, CI/CD runners, workload certificates and AI-agent principals form a sprawl traditional joiner-mover-leaver programs never governed.