Research and briefing notes
Findings, method notes and practical guidance for organizations that must document security decisions.
Latest Research Articles
We regularly publish our security findings, guidance, and analysis to help organizations stay ahead of emerging threats.
The GS1900 in the closet is on CISA's list, and Thursday is the federal clock
CVE-2026-7273 lets a LAN user run commands on Zyxel GS1900 switches. GreyNoise counted 996 boxes. Firmware is the June 2.90(...2)C0 line. Due Thursday.
Mathew Potter
Security Analyst
Microsoft called the SharePoint bug spoofing. The write-up says code execution.
CVE-2026-65660 sat in August 11 updates under a 6.5 spoofing title. Today the full paper is out. Authenticated RCE. NVD 8.8. Check the farm actually patched.
Mathew Potter
Security Analyst
The Veeam agent that writes the copies can become SYSTEM
CVE-2026-32996 is a local climb in Veeam Agent for Windows. Public test since September 14. Arctic Wolf marked it used. Fix is 13.0.3.1220 via Backup and Replication 13.0.2.29.
Mathew Potter
Security Analyst
The contractor yard field guide after this month's recorder and switch news
A practical how-to for Alberta and B.C. yards: theft habits, solar-trailer questions, edge kits that stay off the office LAN, evidence an adjuster can use, and PIPA notice you can put on a sign.
Mathew Potter
Security Analyst
The restore page on a Netcore router is a command prompt, and the vendor did not answer
CVE-2026-94099 is a 9.x command injection in NBR200V2 Backup Restore. Public test. No patch in the record. Same lesson as Acronis last week: the restore is a computer.
Mathew Potter
Security Analyst
thegentlemen listed Air Canada. That is a claim. Fifty-one thousand is their number.
A leak-site post on September 9 claimed 51,409 files from Air Canada. No official statement, no samples in the reviews we trust. Treat it like the Calgary club listing: wait for the organization, watch the phishing.
Mathew Potter
Security Analyst
Stay updated
New briefing notes by email. No marketing list, and you can leave at any time.
We respect your privacy. Unsubscribe at any time.