Curated security research, vulnerabilities, advisories and tools for practitioners.

#volexity

Security coverage tagged volexity.

1.

[CVE-2026-85046] Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP

vulnerability | 2026-10-16 18:27 | CVE-2026-85046 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

2.

VerdantBamboo: Just Another BRICKSTORM in the Firewall

research | 2026-06-04 20:23 | volexity.com | Original ↗ | .md | #cloud | #vulnerability-research | #threat-intelligence

3.

Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks

research | 2025-12-04 18:29 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

4.

APT Meets GPT: Targeted Operations with Untamed LLMs

research | 2025-10-08 12:25 | volexity.com | Original ↗ | .md | #ai-security | #vulnerability-research | #threat-intelligence

5.

Go Get ‘Em: Updates to Volexity Golang Tooling

research | 2025-08-11 18:41 | volexity.com | Original ↗ | .md | #vulnerability-research | #open-source | #threat-intelligence

6.

Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

research | 2025-04-22 12:31 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

7.

GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically

research | 2025-04-01 09:37 | volexity.com | Original ↗ | .md | #vulnerability-research | #open-source | #threat-intelligence

8.

Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

research | 2025-02-13 17:32 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #microsoft

9.

[CVE-2022-38028] The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

vulnerability | 2024-11-22 06:55 | CVE-2022-38028 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

10.

BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA

research | 2024-11-15 14:50 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

11.

StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms

research | 2024-08-02 12:05 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #malware

12.

[CVE-2022-0847] DISGOMOJI Malware Used to Target Indian Government

vulnerability | 2024-06-13 12:27 | CVE-2022-0847 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #malware

13.

Detecting Compromise of CVE-2024-3400 on Palo Alto Networks GlobalProtect Devices

vulnerability | 2024-05-15 15:26 | CVE-2024-3400 | volexity.com | Original ↗ | .md | #rce | #zero-day | #vulnerability-research

14.

CharmingCypress: Innovating Persistence

research | 2024-02-13 09:47 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

15.

How Memory Forensics Revealed Exploitation of Ivanti Connect Secure VPN Zero-Day Vulnerabilities

research | 2024-02-01 11:59 | volexity.com | Original ↗ | .md | #rce | #zero-day | #vulnerability-research

16.

[CVE-2024-21887] Ivanti Connect Secure VPN Exploitation: New Observations

vulnerability | 2024-01-18 13:55 | CVE-2024-21887 | volexity.com | Original ↗ | .md | #rce | #vulnerability-research | #threat-intelligence

17.

[CVE-2023-46805] Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure VPN

vulnerability | 2024-01-10 14:00 | CVE-2023-46805 | volexity.com | Original ↗ | .md | #rce | #zero-day | #vulnerability-research

18.

EvilBamboo Targets Mobile Devices in Multi-year Campaign

research | 2023-09-22 12:08 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #malware

19.

Charming Kitten Updates POWERSTAR with an InterPlanetary Twist

research | 2023-06-28 09:07 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

20.

3CX Supply Chain Compromise Leads to ICONIC Incident

research | 2023-03-30 11:37 | volexity.com | Original ↗ | .md | #supply-chain | #vulnerability-research | #threat-intelligence

21.

Using Memory Analysis to Detect EDR-Nullifying Malware

research | 2023-03-07 11:01 | volexity.com | Original ↗ | .md | #vulnerability-research | #malware | #memory-forensics

22.

₿uyer ₿eware: Fake Cryptocurrency Applications Serving as Front for AppleJeus Malware

research | 2022-12-01 15:41 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #malware

23.

Mass Exploitation of (Un)authenticated Zimbra RCE: CVE-2022-27925

vulnerability | 2022-08-10 15:22 | CVE-2022-27924 | volexity.com | Original ↗ | .md | #rce | #vulnerability-research | #threat-intelligence

24.

SharpTongue Deploys Clever Mail-Stealing Browser Extension “SHARPEXT”

research | 2022-07-28 09:39 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

25.

Storm Cloud Unleashed: Tibetan Focus of Highly Targeted Fake Flash Campaign

research | 2020-03-31 13:39 | volexity.com | Original ↗ | .md | #cloud | #vulnerability-research | #threat-intelligence