Trident Research https://tridentsecurity.io/blog Cloud security, attack-path analysis, and web and API penetration-testing research from Trident. en-us Sat, 11 Jul 2026 00:00:00 GMT Freezing a six-figure crypto vault https://tridentsecurity.io/blog/oracle-bounds-mismatch-vault-freeze https://tridentsecurity.io/blog/oracle-bounds-mismatch-vault-freeze Sat, 11 Jul 2026 00:00:00 GMT Trident Research Threat Research A few percent of disagreement between two contracts can freeze every deposit and withdrawal in a live crypto vault — and this one went unnoticed for six weeks. A phone system, one request, and root https://tridentsecurity.io/blog/cisco-cucm-rce https://tridentsecurity.io/blog/cisco-cucm-rce Mon, 29 Jun 2026 00:00:00 GMT Trident Research Threat Research An unauthenticated SSRF in Cisco Unified CM’s WebDialer chains to a JSP webshell and root-level compromise of enterprise voice infrastructure. Cisco patched it on June 3; within weeks attackers were dropping webshells over Tor, and CISA gave federal agencies until June 28 to fix it. Meta's AI got tricked into resetting account passwords https://tridentsecurity.io/blog/meta-ai-instagram-account-takeover https://tridentsecurity.io/blog/meta-ai-instagram-account-takeover Mon, 01 Jun 2026 00:00:00 GMT Trident Research Incident Analysis Attackers simply asked Instagram's AI support assistant to send password-reset codes to an email they controlled, and it complied.