Publications · 3

Reports & briefings

Annual reports, threat briefs, technical notes and quarterly advisory roundups — every figure sourced to public primary research.

⌕

3 of 3

When a security fix ships without details, the diff is the vulnerability. A worked example on the WordPress-core "WP2Shell" unauthenticated RCE.

A month of supply-chain malware on npm — five operations, 33 malicious releases, caught from the live changes feed.

An annual review of the Model Context Protocol ecosystem: adoption, governance, threat landscape and the emerging security stack.