↓ Skip to main content

Blog

March 2025

17

A Technical Deep Dive into Modern Phishing Methodologies Byte

15

Password reuse is rampant: nearly half of observed user logins are compromised Byte

14

Bounty Hunter: A Hacker Origin Story Byte

13

Operation AkaiRyū: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor Byte

February 2025

24

CVE-2025-27364 - RCE in MITRE Caldera Vulnerability

24

DogWifTools compromised to drain wallets Byte

23

CVE-2024-29510 – Exploiting Ghostscript using format strings Byte

23

CVE-2021-4440 and the Limits of the CNA System Byte

22

Snake Oil: On Security, Meaning, and Marketing Byte

22

SSH Protocol Flaw CVE-2023-48795 Terrapin Attack: All You Need To Know Byte

22

Palo Alto - Putting The Protecc In GlobalProtect (CVE-2024-3400) Byte

21

CVE-2023-24871: intro & vulnerability description Byte

21

The Bybit Incident: When Research Meets Reality - Check Point Research Byte

20

An inside look at NSA (Equation Group) TTPs from China’s lense Byte

20

16 Malicious Chrome Extensions Infected Over 3.2 Million Users Byte

20

Cellebrite zero-day exploit used to target phone of Serbian student activist Byte

January 2025

5

Backdooring Your Backdoors - Another $20 Domain, More Governments Byte

5

Bad Tenable plugin updates take down Nessus agents worldwide Byte

4

Malicious Ultralytics releases reached PyPI via CI and an old token Byte

4

Ruling in WhatsApp against NSO Group case Byte

3

Tracking down exposed Gophish admin panels with urlscan and Censys Byte

3

The Surprising Complexity of Finding Known Vulnerabilities Byte

2

Databroker Files: New Dataset Reveals 40,000 Apps Behind Location Tracking Byte

2

Fortinet Zero-Day Used to Exfiltrate Firewall Configs, Now Leaked Byte

1

Story of a Pentester Recruitment 2025 Byte