Skip to main content
BreachLine Labs

Security Research & Attack Chain Analysis

Understand how attacks work, what the evidence shows and how to reduce the risk.

Disclosure register

Security advisories

Public disclosure records, vendor references, and our publication standards.

Free toolkit

Put the checks to work

Review dependencies, lockfiles, and security settings in your browser.

BreachLine research and guides
Vulnerability ResearchFeatured

SSRF to Cloud Takeover: Anatomy of a Metadata Attack

How a single SSRF reaches the cloud metadata endpoint, steals IAM credentials, and pivots to full account takeover, plus the controls that stop it.

29 May 2026 13 minBreachline Labs
Read paper
More research

1 paper

BreachLine research and guides
Vulnerability Research

JWT Attack Chains: Algorithm Confusion & JWKS Poisoning

The JWT attacks that bypass mature defenses: RS256-to-HS256 confusion, jku/x5u poisoning, kid injection, and cross-service token replay.

28 May 202616 min

Explore

Research digest

Stay ahead of emerging threats

New vulnerability research, exploit chains, and CVE analysis, delivered weekly.