Blog

Anthropic's red team and Mozilla find 22 Firefox CVEs with Claude Byte

LLM agents wrote over 40 QuickJS exploits for Sean Heelan Byte

Malicious Go “crypto” Module Steals Passwords Byte

Axios Supply Chain Attack Post-Mortem Byte

CVE-2026-2441 - Crash PoC for Chrome's CSS font feature use-after-free Vulnerability

2025 Top 20 Chinese Cybersecurity Enterprises 6 min read

On December 29, 2025, the Internet Society of China (中国互联网协会, ISC, an industry association affiliated with MIIT) published the China Internet Enterprise Comprehensive Strength Index (2025). Buried in …

Anatomy of the One Fox Toolkit 3 min read

When EclecticIQ analyzed a 2023 Cobalt Strike intrusion at Taiwan’s Directorate General of Highways (MOTC), the most useful artifact wasn’t the malware. It was a filesystem path leaked in …

BREAKMEIFYOUCAN: Keyspace Reduction Attacks on NXP NFC Tags Vulnerability

CVE-2025-15467 - AISLE found all 12 OpenSSL January 2026 CVEs Vulnerability

VoidLink: The Cloud-Native Malware Framework Byte

GoBruteforcer feeds on weak defaults from AI-generated configs Byte

Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC Byte

Fake PoCs Wasting Everyone's Time Byte

A LinkedIn Job Offer Tried to Install Malware on My Machine Byte

PeckBirdy: LOLBins Exploitation by China-aligned Threat Groups Byte

PDF Forensics: The Epstein PDFs Byte

Recreating Uncensored Epstein PDFs from Raw Encoded Attachments Byte

Chrome Extensions Stealing Your AI Chats Byte

Satellite Hacking via RF Attack Chaining Byte

Ghost Tapped: NFC Relay Fraud Goes Mobile Byte

The Knownsec Leak: China's Cyber-Espionage Exposed Byte

Chinese leak prevention software doubles as workstation surveillance Byte

Cory Doctorow at 39C3 on repealing anti-circumvention laws Byte

CVE-2025-55182 - React2Shell RCE in React Server Components Vulnerability

CVE-2025-20702 - Airoha Bluetooth chips expose RACE debug protocol Vulnerability