↓ Skip to main content

Byte

Short reads with a comment, plus a source or two for context.

February 2025

24

CVE-2024-29510 – Exploiting Ghostscript using format strings Byte

24

CVE-2021-4440 and the Limits of the CNA System Byte

24

Snake Oil: On Security, Meaning, and Marketing Byte

24

SSH Protocol Flaw CVE-2023-48795 Terrapin Attack: All You Need To Know Byte

24

Palo Alto - Putting The Protecc In GlobalProtect (CVE-2024-3400) Byte

24

CVE-2023-24871: intro & vulnerability description Byte

24

The Bybit Incident: When Research Meets Reality - Check Point Research Byte

24

An inside look at NSA (Equation Group) TTPs from China’s lense Byte

24

16 Malicious Chrome Extensions Infected Over 3.2 Million Users Byte

24

Cellebrite zero-day exploit used to target phone of Serbian student activist Byte

January 2025

5

Backdooring Your Backdoors - Another $20 Domain, More Governments Byte

5

Bad Tenable plugin updates take down Nessus agents worldwide Byte

5

Malicious Ultralytics releases reached PyPI via CI and an old token Byte

5

Ruling in WhatsApp against NSO Group case Byte

5

Tracking down exposed Gophish admin panels with urlscan and Censys Byte

5

The Surprising Complexity of Finding Known Vulnerabilities Byte

5

Databroker Files: New Dataset Reveals 40,000 Apps Behind Location Tracking Byte

5

Fortinet Zero-Day Used to Exfiltrate Firewall Configs, Now Leaked Byte

5

Story of a Pentester Recruitment 2025 Byte

5

Chrome Web Store's Shady Extension Problem Byte

5

Malicious Extensions Circumvent Google’s Remote Code Ban Byte

5

Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel Byte

5

CVSS is dead to us Byte

November 2024

29

Typosquatted npm Packages Inject SSH Backdoor Byte

29

Orange Cyberdefense maps China's cyber offensive ecosystem Byte