
Featured Blog Posts

Blog
September 10, 2026
Beacon: Searchlight Researchers Uncover JavaScript Sandbox Flaw Enabling RCE in Zendesk and Nuclei
Searchlight Labs researchers have uncovered a previously unknown vulnerability in Goja, a JavaScript engine written in Go and used by applications including Zendesk, Nuclei, Grafana k6 and PocketBase.

Blog
August 27, 2026
Beacon: North Korean Hackers Linked to Rust Supply Chain Attack
North Korean threat actors have been linked to a software supply-chain attack targeting the Rust ecosystem, in which attackers compromised a legitimate maintainer account and published malicious versions of three widely used open-source packages.

Blog
August 19, 2026
wp2shell: Discovering One of 2026’s Biggest Zero-Days, and the Future of Exposure Management
How did we uncover WordPress’s biggest zero-day in a decade? Discover how the rapid rise of AI-driven vulnerability research is changing the race between attackers and defenders, and why Preemptive Exposure Management is now essential.












