Article
-
Imperial Kitten (Tortoiseshell) APT: TTPs, Malware, and Attack Simulation
Imperial Kitten is an IRGC-linked Iranian APT targeting aerospace and defense sectors globally since 2017. The group's phishing portals serve malicious ...
-
CVE-2026-119977: When Updating WordPress Becomes the Vulnerability
During my security research at Picus Security, I discovered a race condition in the WordPress core updater that can allow an unauthenticated attacker to ...
Article
-
Meeting the CBK Cyber and Operational Resilience Framework (CORF) Requirements With Picus
-
Node2Shell (CVE-2026-111497): Node.js Brotli RCE Vulnerability Explained
-
Meeting the Health Care Cybersecurity and Resiliency Act (S. 3315) Requirements With Picus
-
New HIPAA Security Requirements: What the Health Care Cybersecurity Act Means for Security Teams
-
Famous Chollima APT Group: Major Activities, TTPs, and Simulation
-
What PHP2Shell Reveals About the Limits of Automated Pentesting
-
PHP2Shell: Critical PHP RCE Flaws (CVE-2026-109618 & CVE-2026-109619) Explained
-
-3.png?width=367&height=232&name=image%20(61)-3.png)
CVE-2026-88771: Citrix NetScaler Pre-Auth Command Injection Explained
-
CISA AA26-281A: How Chinese Government-Linked Actors Steal Sensitive Data