Advisories
2026-07
CVE-2026-14551: Local Privilege Escalation in the Servereye Client (Sensorhub)
2026-05
CVE-2026-2743, CVE-2026-44128: SeppMail Unauthenticated RCE
2026-04
CVE-2026-0539: Local Privilege Escalation in pcvisit Remote Software
2026-04
CVE-2026-3991: Local Privilege Escalation in Symantec DLP Agent
2026-02
CVE-2025-13176: Local Privilege Escalation in ESET Inspect EDR
2025-11
CVE-2025-51682, CVE-2025-51683: Time Management Software SQLi-RCE
2025-10
CVE-2025-10363: Unauthenticated RCE in Swiss Finance Software Topal
2025-05
CVE-2025-47188: Mitel Phone Unauthenticated RCE
2019-04
CVE-2019-10123: Logistics Sofware SQLi-RCE
Blog Posts
2026
10 posts
09-28
AI Ate My Velociraptor
09-18
Iranopasmigirim - Unmasking an ever-evolving Espionage Campaign Against Iranian Dissidents - Part 1
08-07
22 CVEs in TeamDavid® a "secure" M365 alternative
06-15
Anatomy of a Deno-Based Proxy & RAT
06-09
Ghost-Sender - Universal Email Spoofing against Exchange Online
05-18
SeppMail Secure E-Mail Gateway: Critical RCE and LFI Vulnerabilities
04-17
BravoX - The new Kids on the Block
04-09
Slithering Through the Noise - Deep Dive into the VIPERTUNNEL Python Backdoor
03-13
Decrypting and Abusing Predefined BIOCs in Palo Alto Cortex XDR
02-24
Abusing Cortex XDR Live Terminal as a C2
2025
9 posts
12-01
CLRaptor: Hunting reflected assemblies with Velociraptor
10-10
Analyzing and Breaking Defender for Endpoint's Cloud Communication
09-19
Automation of VHDX Investigations
05-23
Attacking EDRs Part 4: Fuzzing Defender's Scanning and Emulation Engine (mpengine.dll)
02-24
Attacking EDRs Part 3: One Bug to Stop them all
02-17
Attacking EDRs Part 2: Driver Analysis Results
02-10
Attacking EDRs Part 1: Intro & Security Analysis of EDR Drivers
01-23
Tear Down The Castle - Part 2
01-19
Tear Down The Castle - Part 1