Resources Archive - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Resource Library

Events Gartner Cybersecurity & Risk Management Summit 2027, London September 21-23, 2027 - ExCeL London, London, U.K. Sep 21, 2027 1 min read
Events Gartner Cybersecurity & Risk Management Summit 2027 June 14-16, 2027 - Gaylord National Resort, National Harbor, MD Jun 14, 2027 1 min read
Events TPRA 2027 Risk Management Conference April 26-28, 2027 - Hilton West Palm Beach, West Palm Beach, FL Apr 26, 2027 1 min read
Events RSAC 2027 Conference April 5-8, 2027 - Moscone Center, San Francisco, CA Apr 5, 2027 1 min read
Threat Research Able2Shell: Public Exploit Chains Put N-central Management Infrastructure at Risk Overview On November 9, 2026, N-able took its hosted N-central environments offline following the public disclosure of 33 reported vulnerabilities, collectively named Able2Shell. The disclosure included proof-of-concept (PoC)… Threat Research Team Safe Security Nov 12, 2026 8 min read
Threat Research CVE-2026-102895: Inside the GPUStack “Real-IP” Bypass and the Loopback-Trust Flaw Artificial-intelligence infrastructure has quietly become some of the most privileged compute in the enterprise. GPUStack — an open-source manager that pools GPUs and serves large-language-model endpoints across a… SAFE Safe Security Nov 12, 2026 9 min read
Threat Research CVE-2026-110447 One Request to Own Your Nextcloud A pre-authentication OS command injection in Nextcloud’s richdocumentscode app allows an unauthenticated attacker to achieve full RCE with a single HTTP request – no credentials, no session, no… SAFE Safe Security Nov 12, 2026 12 min read
Threat Research CVE-2026-119977: Inside the WordPress Upgrade-Window Race and the Predictable Staging Flaw In late October 2026, WordPress Core shipped a fix for CVE-2026-119977 — an unauthenticated remote code execution (RCE) that exists only while a site is updating itself. It… SAFE Safe Security Nov 12, 2026 8 min read
Webinars The TPRM Analyst’s AI Playbook Nov 10, 2026 1 min read
Webinars From Breach Alert to Resolution Nov 6, 2026 2 min read
Threat Research SSHole: High-Severity OpenSSH Vulnerability Turns Disabled Passwords Into Unauthorized Access By SAFE Threat Research Team Overview An account with no valid password should never accept password authentication. A newly disclosed OpenSSH vulnerability breaks that fundamental security assumption, potentially… SAFE Safe Security Nov 6, 2026 8 min read
Threat Research CVE-2026-18963 Inside the Keycloak Reset-Credentials Bypass and Pre-Auth Account Takeover A pre-authentication logic flaw in Keycloak 26.0.0–26.7.1 allows an attacker who knows only a victim’s username to change their password – without credentials, phishing, or any victim interaction.… SAFE Safe Security Nov 4, 2026 11 min read