Resources | Picus Security

FEATURED

CVE-2026-119977: When Updating WordPress Becomes t...

During my security research at Picus Security, I discovered a race...

Meeting the CBK Cyber and Operational Resilience F...

What is the CBK Cyber and Operational Resilience Framework (CORF)? ...

Imperial Kitten (Tortoiseshell) APT: TTPs, Malware, and Attack Simulation

Article

CVE-2026-119977: When Updating WordPress Becomes the Vulnerability

Article

Meeting the CBK Cyber and Operational Resilience Framework (CORF) Requireme...

Article

Node2Shell (CVE-2026-111497): Node.js Brotli RCE Vulnerability Explained

Article

Meeting the Health Care Cybersecurity and Resiliency Act (S. 3315) Requirem...

Article

New HIPAA Security Requirements: What the Health Care Cybersecurity Act Mea...

Article

Famous Chollima APT Group: Major Activities, TTPs, and Simulation

Article

What PHP2Shell Reveals About the Limits of Automated Pentesting

Article

PHP2Shell: Critical PHP RCE Flaws (CVE-2026-109618 & CVE-2026-109619) Expla...

Article

CVE-2026-88771: Citrix NetScaler Pre-Auth Command Injection Explained

Article

CISA AA26-281A: How Chinese Government-Linked Actors Steal Sensitive Data

Article

Dire Wolf Ransomware Attacks: How to Test and Strengthen Your Defenses

Article

1 2 3 ... 36