Hardening Library

Security research, tutorials, and product updates from the Retrievy team

Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.

Browse by: Articles 15 Releases 3 Threat Intel 14 Identity Security 2

Introducing Identity X-Ray: See What Your Permissions Actually Grant

Your list of admins is not your attack surface. Here is how to map the real identity attack paths, on-prem and in the cloud, and find the shadow admins who can reach Tier 0 through a chain nobody documented.

Ney Gelbcke Junior Jul 05 · 9 min

Read

X-Ray Vision for FortiGate and Active Directory: What Your Audit Tool Isn't Showing You

Releases

May 16, 2026 9 min read

X-Ray Vision for FortiGate and Active Directory: What Your Audit Tool Isn't Showing You

FortiGate and Active Directory audits now include full policy simulation in Retrievy. Showing which GPOs actually win, which firewall rules have no profile attached, and where your passing compliance checks are covering for real exposure.

Ney Gelbcke Junior

Read Now

Microsoft's 138-Patch Drop Puts DNS and Netlogon RCE Front and Center

Threat Intel

May 14, 2026 4 min read

Microsoft's 138-Patch Drop Puts DNS and Netlogon RCE Front and Center

Microsoft's latest Patch Tuesday delivers fixes for 138 CVEs — 30 rated Critical — with remote code execution flaws in DNS Server and Netlogon demanding immediate operator attention.

Retrievy Team

Read Now

Two New Windows Zero-Days Target BitLocker and CTFMON Privilege Escalation

Threat Intel

May 14, 2026 4 min read

Two New Windows Zero-Days Target BitLocker and CTFMON Privilege Escalation

A researcher known as Chaotic Eclipse has dropped two unpatched Windows zero-days — dubbed YellowKey and GreenPlasma — hitting BitLocker's encryption guarantees and CTFMON's privilege boundary.

Retrievy Team

Read Now

AI-Generated Zero-Day Exploit Bypasses 2FA at Scale in the Wild

Threat Intel

May 13, 2026 4 min read

AI-Generated Zero-Day Exploit Bypasses 2FA at Scale in the Wild

Google has identified a threat actor using a zero-day exploit likely built with AI assistance — the first confirmed in-the-wild use of AI for vulnerability discovery and exploit generation, targeting 2FA mechanisms.

Retrievy Team

Read Now

Critical RCE Vulnerabilities Hit FortiSandbox and FortiAuthenticator: Patch Now

Threat Intel

May 13, 2026 3 min read

Critical RCE Vulnerabilities Hit FortiSandbox and FortiAuthenticator: Patch Now

Fortinet has disclosed critical remote code execution flaws in FortiSandbox and FortiAuthenticator. Operators running either product should treat patching as an emergency change.

Retrievy Team

Read Now

Password Resets Alone Won't Evict Attackers From Active Directory

Threat Intel

May 11, 2026 4 min read

Password Resets Alone Won't Evict Attackers From Active Directory

Cached credentials and live Kerberos tickets mean a compromised AD account stays exploitable long after a password reset. Here's what operators need to do instead.

Retrievy Team

Read Now

CISA's Four-Day Ivanti EPMM Deadline Should Reset Your Patch Clock Too

Threat Intel

May 09, 2026 3 min read

CISA's Four-Day Ivanti EPMM Deadline Should Reset Your Patch Clock Too

CISA ordered federal agencies to patch an actively exploited Ivanti EPMM zero-day within four days. If you run EPMM in any environment, that timeline should be yours as well.

Retrievy Team

Read Now

Ransomware Hits Backups First — Your Recovery Plan Is the Target

Threat Intel

May 08, 2026 4 min read

Ransomware Hits Backups First — Your Recovery Plan Is the Target

Attackers don't ignore your backups — they hunt them down before triggering encryption. Here's why most backup strategies fail at exactly the moment they're needed most.

Retrievy Team

Read Now

MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen

Threat Intel

May 07, 2026 3 min read

MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen

Iranian threat group MuddyWater is deploying Chaos ransomware as a distraction while conducting actual espionage via Microsoft Teams social engineering — a double-layer deception operators need to account for.

Retrievy Team

Read Now

Security research, tutorials, and product updates from the Retrievy team

Introducing Identity X-Ray: See What Your Permissions Actually Grant

Popular topics

Cookie Preferences