CVE-2026-114625: Actively Exploited VeloCloud Orchestrator SQL Injection
CISA lists CVE-2026-114625 as actively exploited. Identify affected on-prem VeloCloud Orchestrator versions, preserve evidence, hunt activity, and patch safely.
VigilSecureInfo / Security engineering
Security intelligence
you can put to work.
Technical guides and threat analysis for defending Linux, cloud infrastructure, and detection pipelines.
Latest dispatches
04 guides- 01
- 02
- 03
- 04
Explore the knowledge base
Threat Intel
Guides, research, and practical steps from the archive.
Integrity Tech Intrusions: Detection Guide for AA26-281A
A defender-focused analysis of CISA AA26-281A, with detection priorities, response actions and a safe synthetic log-triage lab.
CISA KEV Vulnerability Prioritization After the Weekly Bulletin
CISA retired its Weekly Vulnerability Bulletin. Build a KEV-first prioritization workflow with asset context, automation, and a safe hands-on lab.
Building a CTI Program: Cyber Threat Intelligence 2026
Build a cyber threat intelligence program in 2026: PIRs, intelligence lifecycle, STIX/TAXII sharing, dark web monitoring, MISP platform, and operationalizing intelligence.
Threat Intelligence 101: IOCs & MITRE
Master threat intelligence fundamentals. Learn about IOCs, TTPs, threat actor tracking, and operationalizing CTI in your SOC.
