Blog
CTEM
How CTEM Turns Vulnerability Data Into Risk Reduction
Series: Understanding CTEM and Why It Matters | Part 2 of 3: Scoping, Discovery, and Prioritization By: Ramesh Ramachandran In the first blog of this series, we talked about…
CTEM
The Defender’s Window Is Open. Here Is What Enterprise Security Has to Change.
Part 1 of a four-part series on what the defender’s window requires at enterprise scale. This week, OpenAI and more than 100 organizations, including Google, Microsoft, CrowdStrike, and…
Threat Research
New Exploitation Signals Put Oracle, GitLab, and Zimbra in Focus
By SAFE Threat Research Team This week’s exploitation activity spans enterprise middleware, development platforms, collaboration software, remote-access infrastructure, and AI tooling. Oracle HTTP Server and WebLogic Proxy CVE-2026-21962…
Trends
The Suspect Is New. The Doors Are Not.
Explaining the Hugging Face break-in the way I would explain it to a jury By Josh Fazio, VP of Global Pre-Sales, Safe Security The hardest part of working…
CTEM
AI Took 17,600 Autonomous Actions to Break In. How Many Is Your Defense Taking Today?
By: Saket Modi, Co-Founder and CEO of SAFE “AI models are becoming extraordinary zero-day discovery engines.” – JFrog’s CTO Last month, Hugging Face disclosed a security incident…
Events
Life After Mythos: 3 Hard Truths BlackHat Missed
By Dr Meghan E Maneval, Director of Community and Education Walking the floor at BlackHat USA 2026, one thing was undeniable: the security industry has officially crossed into…
Threat Research
N-able RMM Compromise, SonicWall Ransomware Intrusions, and OWAReaper Persistence Lead This Week’s CVE Priorities
By SAFE Threat Research Team This week’s exploitation activity is concentrated on technologies that already hold administrative trust across enterprise environments. Attackers exploited N-able N-central to obtain remote…
Threat Research
Windchill Extortion, Webmail Espionage, and cPanel Attacks Lead This Week’s CVE Priorities
By SAFE Threat Research Team This week’s exploitation activity is concentrated around known vulnerabilities affecting exposed enterprise platforms, with attackers targeting systems that provide access to sensitive data,…
Threat Research
wp2shell, SonicWall Zero-Days, and ServiceNow RCE Drive This Week’s CVE Priorities
By SAFE Threat Research Team This week’s exploitation activity shows how quickly newly disclosed vulnerabilities can move from patch release to real-world attacks. WordPress wp2shell moved from disclosure…
Threat Research
Roundcube Espionage and CMS Webshell Campaigns Drive This Week’s CVE Priorities
By SAFE Threat Research Team This week’s strongest signals cluster around internet-facing platforms, including webmail systems, CMS deployments, plugins, extensions, and application components. From Roundcube exploitation linked to…