Tova: Two critical Citrix vulnerabilities, attackers getting there before the patch, and the third NetScaler advisory in seven weeks. At this point, NetScaler is having a pretty terrible season.

“Absence of evidence is not evidence of absence.” Carl Sagan popularized the line, drawing on a much older statistical idea, and it’s one of the most misapplied sentences in science. It may also be ...

On October 8, 2026, the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), United Kingdom National Cyber Security Centre ...

On October 6, 2026, the Federal Bureau of Investigation (FBI) and the US Secret Service (USSS) released a joint Cybersecurity Advisory titled “FortiBleed Operations Continue Targeting Exposed Systems ...

The Cyber Resilience Brief: Integrity Tech and AA26-281A Tova Dvorin: Ten government agencies across seven countries put their names on the same advisory: AA26-281A. The headline is Chinese government ...

For years, security leaders have operated on a reasonable assumption that attackers need time: time to gain a foothold, time to escalate privileges, time to move laterally, and time to find what ...

The Cyber Resilience Brief — A SafeBreach Podcast Episode 85 — FortiBleed and Firewall Lockouts Hosts: Tova Dvorin, Adrian Culley Recorded: October 2026 Adrian Culley: It’s the 6th of October 2026 and ...

Endpoint detection and response (EDR) solutions have become a key component of many enterprise endpoint security strategies, resulting in a forecasted market value close to $17 billion by 2030. This ...

In August, I shared a blog on my most recent research project called Windows Downdate, which I first presented at Black Hat USA 2024 and DEF CON 32 (2024). In it, I explained how I was able to develop ...

See how SafeBreach Labs researchers discovered a critical remote code execution vulnerability in the MS-EVEN RPC protocol that allowed low-privileged users to bypass share limitations and write ...