Outpace Adversaries
Boston, MA
Joined November 2021
- Tweets579
- Following28
- Followers1K
- Likes16
Thank you to @CRN for naming VulnCheck a 2026 Stellar Startup! Great company to be in alongside vendors partnering with the channel to help organizations stay safer from emerging threats.
More: crn.com/news/security/2026/s…
86
VulnCheck security researcher Patrick Garrity dives into the data seven months into Anthropic’s Project Glasswing.
As Patrick puts it, “The receipts keep coming in. They still don’t reconcile.”
Read his analysis
vulncheck.com/blog/anthropic…
Attacks got faster. What must defenders do next?
Recorded live at THREATCON1, Gen. Paul Nakasone (Ret.) joins VulnCheck’s Jay Wallace and Caitlin Condon to discuss critical infrastructure, intelligence sharing and cyber resilience.
Listen/watch: threatcon1.org/podcast
38 canary events → seven months of attacker dev history.
An attacker hit Gotenberg CVE-2026-42589 to drop cache_base, a custom Go reverse shell. We followed it to a repo full of backdoors, webshells and Windows privesc tools.
Learn more: vulncheck.com/blog/cache-me-…
Join VulnCheck at SANS CyberThreat 2026 in London, November 16–17! Our team will share how its exploit and vulnerbaility intelligence helps teams prioritize threats and respond faster.
Learn more: vulncheck.com/events/cyberth…
166
VulnCheck examined nearly 2 million exploitation events from Canary Intelligence, showing how captured source IPs, payloads and attacker infrastructure provide context beyond a KEV entry.
Learn how security teams can use this in the wild: vulncheck.com/blog/what-cana…
1
122
VulnCheck is at OODAcon today in Reston, VA connecting with leaders on cybersecurity and technology risk. Come say hello and learn how our exploit and vulnerability intelligence helps prioritize threats.
vulncheck.com/events/oodacon…
2
208
VulnCheck’s Patrick Garrity connected with Raphael Satter of Reuters to discuss AI and vulnerability discovery. After weeks of overlapping security issues, he expects more fire drills for systems exposed to the internet.
reuters.com/legal/litigation…
AI is reshaping the threat landscape. Talent builds the security to meet it.
ICYMI, Decipher covered Gen. Paul Nakasone’s THREATCON1 keynote on AI, emerging threats and the people behind the defense.
Read more: decipher.sc/2026/10/06/ai-ma…
Will we see you at OODAcon in early November? Meet VulnCheck on Nov. 4 in Reston, Virginia!
We’re a Silver sponsor. Connect with our team to talk exploit and vulnerability intelligence that helps you prioritize threats and respond faster.
Learn more: vulncheck.com/events/oodacon…
VulnCheck disclosed CVE-2026-49950, which lets attackers who can reach a Xoscar actor-pool port execute code without credentials.
No fix was available at publication. Restrict access to intended peers.
Read the research: vulncheck.com/blog/xorbits-x…
1
338
An author account. A crafted filename. Code execution on the server.
VulnCheck recently disclosed CVE-2026-104085 in SPIP’s odt2spip plugin. Upgrade to 4.4.0 or deactivate the plugin until you can.
Read the research: vulncheck.com/blog/spip-odt2…
4
290
VulnCheck Initial Access Intelligence has surpassed 1,000 exploits.
To mark the milestone, we’re opening Initial Access Community with 40 free exploits, detection rules and testing artifacts. New additions every Monday.
Learn more: vulncheck.com/blog/initial-a…
Heading to BSides NoVA? Catch VulnCheck CTO Jacob Baines presenting “Chinese Implants in the Supply Chain.”
Saturday, Oct. 31, at 1 p.m. ET
Threat Village – Fuse – 1311 – A
Don’t miss it: bsidesnova-2026.sessionize.c…
Don’t miss today’s In the Wild with VulnCheck at noon CT!
Join Spencer, Kimber and Patrick to unpack PHP2Shell: what makes exposed systems exploitable, the race to build working exploits and what VulnCheck Canaries have observed.
Register: wwv.vulncheck.com/in-the-wil…
2
149
AI is making vulnerabilities easier to find. Who’s going to fix them?
VulnCheck’s Josh Bressers joined @CyberScoop’s Safe Mode podcast to discuss AI-generated reports, the pressure on open-source maintainers and the human work behind fixes.
Listen: cyberscoop.com/radio/how-vul…
Meet VulnCheck at MITRE ATT&CKcon 7.0, Oct. 27–28 in McLean, Virginia!
We’re sponsoring this year’s event. Connect with our team to learn how exploit and vulnerability intelligence helps defenders prioritize threats and respond faster.
Learn more: vulncheck.com/events/mitre-a…
163
Financial institutions face a constant stream of vulnerabilities. VulnCheck can help.
Meet us at Booth #50 at FS-ISAC’s Americas Fall Summit, Oct. 26–29 in Austin. Plus, catch Neal Dennis on maturing beyond CVSS and EPSS.
Learn more: vulncheck.com/events/fs-isac…
125
VulnCheck is at RSTCON 2026 in Charlotte, Oct. 23–25!
We’re a Gold sponsor, joining researchers focused on security in critical industries. Our team will be at the VulnCheck booth to talk exploit intelligence and vulnerability prioritization.
vulncheck.com/events/rstcon-…
1
284
Hundreds of PHP2Shell PoCs. Very few work. What makes a system exploitable?
Join In the Wild with VulnCheck on Oct. 28 at noon CT for the exploit race, exposure data, Canary observations and what defenders can do now: wwv.vulncheck.com/in-the-wil…