↓ Skip to main content

Blog

May 2023

23

Python Software Foundation (PSF) subpoenaed for PyPI user data Byte

9

QR code fraud via fake parking tickets and a milk tea survey Byte

8

Building a Red Team Infrastructure in 2023 Byte

8

QakBot dominates the first edition of delivr.to's top 10 payloads Byte

7

Google opens a free deps.dev API for package metadata Byte

3

CMEPW/BypassAV, a mind map of AV and EDR evasion techniques Byte

February 2023

22

Building a spy Chrome extension under Manifest v3 Byte

20

Open Software Supply Chain Attack Reference (OSC&R) Byte

17

CVE-2023-25136 - Pre-auth double free in OpenSSH 9.1 sshd Vulnerability

16

Dota 2 with V8 from 2018 Byte

16

How phishing adapted after Office blocked macros by default Byte

15

VSCode as C2 framework Byte

15

Cypher injection in Neo4j, from LOAD CSV to AWS credentials Byte

14

Insights into Phishing as a Service Byte

14

How ransomware encrypts files, per ATT&CK T1486 Byte

13

Trail of Bits audit of cURL finds two security bugs Byte

13

Stealthy C2 via Failed Request Event Buffering (FREB) Byte

12

A fake finger could make real footage look AI-generated Byte

January 2023

20

CVE-2022-23521 - X41 audit finds critical heap overflows in Git Vulnerability

19

CVE-2023-22809 - sudoedit policy bypass allows editing any file Vulnerability

18

DensePose from WiFi estimates human poses without cameras Byte

17

Microsoft's VALL-E clones a voice from three seconds of audio Byte

16

Palant picks apart LastPass's breach statement and iteration counts Byte

15

The near crash of Air Transat flight 236 in 2001 Byte

14

CISA Updates Best Practices for MITRE ATT&CK Mapping Byte