↓ Skip to main content

Blog

December 2023

2

CyberCrime & Doing Time: China continues Pig-Butchering Crack-down Byte

November 2023

9

CVE-2023-46747 - F5 BIG-IP Configuration utility unauthenticated RCE Vulnerability

9

CVE-2023-32530 - Trend Micro Apex Central SQL injection via certificates Vulnerability

8

CVE-2023-23583 - Reptar: a redundant REX prefix glitches Intel CPUs Vulnerability

8

Detecting and annoying Burp users Byte

7

Ziso, a German rhyming picture book about internet dangers Byte

7

Data-Bouncing: The art of indirect exfiltration. Byte

6

Privacy is Priceless, but Signal is Expensive Byte

6

Detection Engineering at MITRE ATT&CKCON 2023 Byte

October 2023

24

CVE-2023-4911 - Looney Tunables: glibc ld.so overflow to root Vulnerability

23

CVE-2023-4966 - Citrix Bleed leaks NetScaler session tokens Vulnerability

22

Encrypted traffic interception on Hetzner and Linode Byte

21

Regulations on the Management of Network Product Security Vulnerabilities Byte

21

Fake job offers deliver trojanized PDF viewers and PuTTY Byte

August 2023

6

Acoustic Side Channel Attack on Keyboards Byte

June 2023

1

CVE-2023-33248 - NUIT hides Alexa commands in near-ultrasound audio Vulnerability

1

CVE-2023-0386 - Privilege escalation exploit in OverlayFS Vulnerability

May 2023

31

Block C2 communication with Defender for Endpoint Byte

31

Tuning a Cobalt Strike 4.8 Malleable C2 profile until Sophos EDR misses the beacon Byte

30

OffensiveCon23 talk recordings are up on YouTube Byte

30

Volt Typhoon: PRC state actor living off the land Byte

30

ZipJar: .zip domains, WebDAV and JAR files as an attack chain Byte

25

Typosquatting in NPM via capitalization Byte

24

Google's new .zip TLD makes URLs look like file downloads Byte

23

FinFisher managers indicted Byte