Offensive research
How attackers break production software. Browser zero-days, CI/CD injection, AI supply chain, management-plane bypasses.
In the wild exploits
CVEs under active exploitation, threat-actor campaigns, and emerging-threat reports. What dropped, who's exposed, what to do before Monday.
Defensive research
What defenders should do about what offensive research surfaces. Detection engineering, AI agent guardrails, AppSec program gaps.