↓ Skip to main content

Blog

September 2025

11

Inside Salt Typhoon: China's State-Corporate Advanced Persistent Threat Byte

10

The Phantom Extension: Backdooring chrome through uncharted pathways Byte

July 2025

12

Leaked Secrets in Hidden Commits Byte

12

Arch Linux pulls three AUR packages that installed the CHAOS RAT Byte

11

TrustedSec on running offensive tooling inside the Python interpreter Byte

11

Spotting Malicious Remote IT Applicants Byte

11

Creating a Drone Based Synthetic Aperture Radar Byte

10

Hafnium-affiliated hacker Xu Zewei's arrest and China's cyber ecosystem Byte

10

Fun with Gzip Bombs and Email Clients Byte

9

How to Rob a Hotel Byte

9

An inside look at NSA (Equation Group) TTPs from China's lense Byte

9

Deep dive into CVE-2025-29824 in Windows Byte

7

Malware & Monsters, a tabletop game for incident response training Byte

June 2025

12

Analysis of the NSO BLASTPASS iMessage exploit Byte

12

Build-Your-Own-Ransomware workshop teaches attack and detection Byte

11

NLRB whistleblower alleges DOGE siphoned case data Byte

11

MirrorFace invites Europe to Expo 2025 Byte

10

Practical Known Plaintext Attack Against ZIP Files Byte

10

Viewers de-pixelated Jeff Geerling's censored video within a day Byte

9

OWASP ASVS v5 nears release Byte

9

Analysis of Spyware That Helped to Compromise a Syrian Army from Within Byte

8

BKA - Bundeslagebild Cybercrime 2024 Byte

8

Tracking anticheat updates by pulling modules from their CDNs Byte

March 2025

19

CVE-2025-1974 - IngressNightmare: unauthenticated RCE in Ingress NGINX Vulnerability

18

Typosquatted Go packages deliver malware loaders Byte