Resources | Picus Security

FEATURED

Imperial Kitten (Tortoiseshell) APT: TTPs, Malware...

Key Takeaways Imperial Kitten is an IRGC-linked Iranian APT...

CVE-2026-119977: When Updating WordPress Becomes t...

During my security research at Picus Security, I discovered a race...

OWASP LLM Top 10 (2026): What Every Security Team Should Know

Imperial Kitten (Tortoiseshell) APT: TTPs, Malware, and Attack Simulation

CVE-2026-119977: When Updating WordPress Becomes the Vulnerability

Meeting the CBK Cyber and Operational Resilience Framework (CORF) Requireme...

Node2Shell (CVE-2026-111497): Node.js Brotli RCE Vulnerability Explained

Meeting the Health Care Cybersecurity and Resiliency Act (S. 3315) Requirem...

New HIPAA Security Requirements: What the Health Care Cybersecurity Act Mea...

Famous Chollima APT Group: Major Activities, TTPs, and Simulation

What PHP2Shell Reveals About the Limits of Automated Pentesting

PHP2Shell: Critical PHP RCE Flaws (CVE-2026-109618 & CVE-2026-109619) Expla...

CVE-2026-88771: Citrix NetScaler Pre-Auth Command Injection Explained

CISA AA26-281A: How Chinese Government-Linked Actors Steal Sensitive Data

1 2 3 ... 64