New advisory: edge gateway authentication bypass

See the attack before it lands.

Blackglass Security is the managed detection and offensive testing partner for organizations that treat uptime, customer data, and trust as non-negotiable.

Book a security assessment Explore services

SOC 2 Type II & ISO 27001
24/7 coverage, three regions
11-minute mean time to detect

blackglass — live telemetry ● LIVE

operator@bg-soc:~$ blackglass scan --target acme-corp --deep

[00:00:01] loading 312 detection rules ................ ok

[00:00:02] correlating endpoint, identity, and cloud ... ok

[00:00:03] replaying 14 days of authentication logs ... ok

[00:00:04] 3 high-risk findings, 1 critical

! exposed admin console — 203.0.113.44:8443

✓ remediation playbook generated (12 steps)

✓ detection rule deployed to production

operator@bg-soc:~$

Trusted by security-led teams Northwind Bank Helio Health Vantix Cobalt Freight Lumen Grid Orbital Labs

24/7 Human-led SOC coverage

11 min Mean time to detect

1,480+ Incidents contained

99.99% Telemetry uptime

01 — Capabilities

Coverage that closes the gaps
attackers already map.

View all services

Managed detection & response

A 24/7 SOC that investigates in minutes, not mornings. Every alert arrives with context, blast radius, and a recommended action.

Endpoint, identity, cloud, and SaaS telemetry
Named analysts who learn your environment
Containment playbooks approved by your team

MDR details

Adversary simulation

Penetration testing and red team operations built to answer the only question that matters: can a real attacker reach what you care about?

External, internal, and assumed-breach paths
Social engineering and physical entry testing
Findings mapped to MITRE ATT&CK

Testing details

Cloud & identity hardening

Zero-trust architecture and identity controls that fail safely. We design for the day a credential leaks, not the day everything works.

Conditional access and workload identity
Infrastructure-as-code security review
Migration support across AWS, Azure, GCP

Hardening details

Threat wire

Critical CVE-2026-21894 edge gateway auth bypass · CVSS 9.8 High Silent Ledger ransomware targets logistics providers Medium Credential phishing up 34% quarter over quarter High New infostealer abuses clipboard and accessibility APIs Critical Patch Tuesday: 71 fixes, 9 rated critical Medium Cloud misconfiguration exposed 1.2M records in retail Critical CVE-2026-21894 edge gateway auth bypass · CVSS 9.8 High Silent Ledger ransomware targets logistics providers Medium Credential phishing up 34% quarter over quarter High New infostealer abuses clipboard and accessibility APIs Critical Patch Tuesday: 71 fixes, 9 rated critical Medium Cloud misconfiguration exposed 1.2M records in retail

02 — Why Blackglass

Evidence, not alarm bells.

Most security programs do not fail because of a missing tool. They fail because signal is buried in noise and nobody owns the decision. We fix the operating model first, then prove it with adversary testing.

Operator-led. Every engagement is staffed by practitioners who have defended production environments, not just audited them.
Evidence-backed. Findings include reproducible steps, business impact, and a fix that your engineers can actually ship.
Tool-agnostic. We integrate with the stack you own and reduce spend where telemetry adds no detection value.

Meet the team Security checklist

Rolling 30 days · client aggregate

1,284 critical exposures validated before an attacker could use them

7.4 min median time from alert to a human analyst joining the investigation

96% of containment playbooks executed without waiting for a bridge call

Metrics are aggregated across active retainers and refreshed monthly. No client is identified.

03 — Engagement model

From first call to verified defense.

A typical engagement runs in four phases. Most clients reach their first validated improvement inside three weeks.

Baseline

We map assets, identities, and data flows, then confirm which alerts actually fire. No assumptions, no vanity metrics.

Detect

Detection engineering tuned to your environment, validated with safe attack simulations before it goes live.

Harden

Prioritized remediation with owners and deadlines. We help implement the fixes that reduce real risk fastest.

Prove

Adversary testing and executive reporting that show whether controls held, not whether they exist on paper.

Blackglass found the identity path our previous vendor missed for two years. They gave us a fix on Friday and verified it under attack conditions the following week.

Dana Whitfield Chief Technology Officer, Cobalt Freight

Start here

Find out what an attacker sees.

A two-week external assessment gives you a validated list of exposures, not a 90-page questionnaire.

Request an assessment Read threat intel