The Curious Engineer

All blogs / Security

Cyber Security Research

nccgroup.com/research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

SecurityWindows internalsReverse engineering

’10’15’20’25
Posts
1,494 from 8 May 2006 to 21 Oct 2026
Posting
monthly (11 in the last year)
Kind
company blog

2026 10

  1. When Picos Attack – USB Exploit Engineering
  2. The Quantum Countdown - Chapter 1: The Letters in the Warehouse
  3. Technical Advisory: Microsoft Windows – Windows MIDI Services (USBMIDI2.sys) – CVE-2026-69508
  4. Technical Advisory: Microsoft Windows – usbmidi2.sys MIDI-1.0 wMaxPacketSize pool overflow
  5. Technical Advisory: Microsoft Windows – uaspstor.sys – Device Controlled Kernel Pool OOB Write Via REPORT LUNS (CVE-2026-68839)
  6. Technical Advisory: Microsoft Windows – MIDI Service Module Escalation of Privileges (CVE-2026-62688)
  7. How Hard Is It Really to Break an AI Agent Out of Its Sandbox?
  8. Finding Two Authorization Bypasses in etcd through a Vulnerability Research LLM-Assisted Pipeline
  9. Mining Data from Cobalt Strike Beacons, Part 2: Releasing the Full Corpus
  10. A String Theorist's Guide to Implementing MIKE

2025 30

  1. Fake CAPTCHA Attack Leads to Lumma Malware
  2. Blockchain Key Security: Approvals & Policies
  3. Azure Fabric Backdoor With A Twist
  4. State of the Art of Private Key Security in Blockchain Ops - 3. Private Key Storage and Signing Module
  5. The Symbols of Operation
  6. State of the Art of Private Key Security in Blockchain Ops - 2. Common Custody Solutions Architectures
  7. Legacy Technology in Transport: More Than “Old Tech”
  8. Public Report: VetKeys Cryptography Review
  9. Unmasking Techno Sophists
  10. Goal-Based Regulation
  11. State of the Art of Private Key Security in Blockchain Ops - 1. Concepts, Types of Wallets and Signing Strategies
  12. Your point of departure for forensic readiness
  13. Voice Impersonation and DeepFake Vishing in Realtime
  14. VMware Workstation Guest-to-Host Escape Exploit Development
  15. Technical Advisory: Tesla Telematics Control Unit - ADB Auth Bypass
  16. When AI Guardrails Aren't Enough | Black Hat USA 2025
  17. A Look at RTEMS Security
  18. Autonomous AI Agents: A hidden Risk in Insecure smolagents “CodeAgent” Usage
  19. Masquerade: You Downloaded ScreenConnect not Grok AI!
  20. Quantum Data Centre of the Future
  21. OCP S.A.F.E. Framework Implementation Guide
  22. EAP-TLS: Secure Authentication Explained
  23. Pen Test, Red Team, or Bug Bounty?
  24. Operational Technology: An Engineer’s View
  25. Bybit Hack: In-Depth Technical Analysis
  26. Technical Advisory: Condeon CMS | NCC Group
  27. Technical Advisory: Multiple Vulnerabilities in TCPDF
  28. NCC Group’s 2024 Annual Research Report | NCC Group
  29. Proxying PyRIT for Security Testing
  30. Technical Advisory – Hash Denial-of-Service Attack in Multiple QUIC Implementations

2024 7

  1. PMKID Attacks and the 802.11r Myth
  2. RomHack – Revving Up: The Journey to Pwn2Own Automotive 2024 | NCC Group
  3. Forensic Readiness in Container Environments
  4. Exploiting EV charger vulnerabilities at Pwn2Own
  5. Why AI Can’t Replace Human Pen Testers
  6. Announcing the Cryptopals Guided Tour Video 17: Padding Oracles! | NCC Group
  7. Analyzing AI Application Threat Models

2023 1

  1. Research | A Brief Review of Bitcoin Locking Scripts and Ordinals

2022 12

  1. A glimpse into the shadowy realm of a Chinese APT: detailed analysis of a ShadowPad intrusion | NCC Group
  2. Whitepaper – Project Triforce: Run AFL On Everything (2017)
  3. Writing FreeBSD Kernel Modules in Rust | NCC Group
  4. Back in Black: Unlocking a LockBit 3.0 Ransomware Attack
  5. Wheel of Fortune Outcome Prediction – Taking the Luck out of Gambling (1)
  6. Whitepaper – Practical Attacks on Machine Learning Systems | NCC Group
  7. A deeper dive into CVE-2021-39137 – a Golang security bug that Rust would have prevented
  8. Adventures in the land of BumbleBee – a new malicious loader
  9. Whitepaper – Double Fetch Vulnerabilities in C and C++
  10. BrokenPrint: A Netgear stack overflow
  11. Analyzing a PJL directory traversal vulnerability – exploiting the Lexmark MC3224i printer (part 2)
  12. 10 real-world stories of how we’ve compromised CI/CD pipelines

2021 3

  1. Why IoT Security Matters
  2. A Census of Deployed Pulse Connect Secure (PCS) Versions
  3. Wubes: Leveraging the Windows 10 Sandbox for Arbitrary Processes | NCC Group

2020 6

  1. Wheel of Fortune Outcome Prediction – Taking the Luck out of Gambling
  2. Whitepaper – Exploring the Security of KaiOS Mobile Applications | NCC Group
  3. Whitepaper – Microcontroller Readback Protection: Bypasses and Defenses
  4. ESP32 BluFi Vulnerabilities Enable Code Execution
  5. Analyzing Secure AI Architectures
  6. Cryptopals Guided Tour Video 18

2019 3

  1. Welcome to the new NCC Group Global Research blog
  2. Cracking MIFARE Classic 1K RFID
  3. Xendbg: A Full-Featured Debugger for the Xen Hypervisor

2018 12

  1. WebRATS
  2. YoNTMA | NCC Group
  3. Wsmap
  4. WSSiP: A Websocket Manipulation Proxy
  5. Wsbang
  6. Autochrome
  7. WindowsJobLock
  8. Windows IPC Fuzzing Tools
  9. Windows DACL Enum Project | NCC Group
  10. whitebox
  11. Bleboy
  12. Cross-Site Scripting in Umbraco CMS

2017 3

  1. Blind Exploitation of Stack Overflow Vulnerabilities | NCC Group
  2. Which database is more secure? Oracle vs. Microsoft
  3. A WarCon 2017 Presentation: Cisco ASA – Exploiting the IKEv1 Heap Overflow – CVE-2016-1287

2016 16

  1. Game from 44CON 2013
  2. Absolute Security: Rory McCunes’ presentation
  3. Webinar: SMACK, SKIP-TLS & FREAK SSL/TLS vulnerabilities
  4. Webinar – PCI Version 3.0: Are you ready?
  5. When Security Gets in the Way: PenTesting Mobile Apps That Use Certificate Pinning | NCC Group
  6. Windows 10 USB Mass Storage driver arbitrary code execution in kernel mode
  7. A Peek Behind the Great Firewall of Russia
  8. Avoiding Pitfalls Developing with Electron
  9. Writing Exploits for Win32 Systems from Scratch | NCC Group
  10. When a Trusted Site in Internet Explorer was Anything But
  11. An Introduction to Authenticated Encryption
  12. Windows Phone 7 Application Security Survey | NCC Group
  13. Building Systems from Commercial Components | NCC Group
  14. 44CON Workshop – How to assess and secure iOS apps
  15. What the HEC? Security implications of HDMI Ethernet Channel and other related protocols
  16. A few notes on usefully exploiting libstagefright on Android 5.x | NCC Group

2015 20

  1. Windows USB RNDIS driver kernel pool overflow | NCC Group
  2. Windows remote desktop memory corruptoin leading to RCE on XPSP3 | NCC Group
  3. Whatsupgold Premium Directory traversal
  4. Xen Stack Memory Revelation Research
  5. Windows Remote Desktop Memory Corruption Leading to RCE on XPSP3
  6. Adobe Flash Player Cross Domain Policy Bypass
  7. Adobe flash sandbox bypass to navigate to local drives | NCC Group
  8. Writing Small Shellcode | NCC Group
  9. Writing Secure ASP Scripts | NCC Group
  10. Windows 2000 Format String Vulnerabilities
  11. Bit51 Better Security WP Security Plugin – Unauthenticated Stored XSS to RCE
  12. Blue Coat BCAAA Remote Code Execution Vulnerability
  13. A Simple and Practical Approach to Input Validation | NCC Group
  14. A Back-to-Front TrueCrypt Recovery Story: The Plaintext is the Ciphertext
  15. Xen SMEP & SMAP Bypass Technique Analysis
  16. Work daily with enforced MFA-protected API access
  17. Whitepaper: Recognizing and Preventing TOCTOU
  18. Abusing Blu-ray Players Part 1 – Sandbox Escapes | NCC Group
  19. Windows Firewall Hook Enumeration
  20. Whitepaper: CA Alternative | NCC Group

2014 5

  1. Whitepaper: Perfect Forward Security | NCC Group
  2. A New Flying Kitten?
  3. Writing Robust YARA Rules for Heartbleed
  4. XML Entity Attack Techniques
  5. White Paper: Cryptopocalypse Reference Paper

2013 5

  1. White Paper: Login Service Security
  2. White Paper: Browser Extension Password Managers
  3. Windows DACLs & Why There Is Still Room for Interest
  4. Working with the Open Technology Fund
  5. White Paper: An Introduction to Authenticated Encryption | NCC Group

2012 1

  1. Breaking the Linux Kernel SLOB Allocator

2010 3

  1. HTTP Injection Risk in WebLogic Plug-in
  2. Digest Authentication vs. Session Cookies
  3. HTTP Digest Integrity Revisited

2006 1

  1. Websense Filter Bypass with Cisco Devices

Undated 1356

  1. Rapid Breach: Social Engineering to Remote Access in 300 Seconds
  2. Public Report - Google Confidential Space Security Assessment | NCC Group
  3. HTTP to MCP Bridge
  4. Public Report - VeChainThor Galactica Security Assessment | NCC Group
  5. 5 MCP Security Tips | NCC Group
  6. Insomnihack - Pioneering Zero Days at Pwn2Own Automotive 2024
  7. VeChain JavaScript SDK Cryptography and Security Review
  8. A Rendezvous with System Management Interrupts
  9. Security Tips For Your AI Cloud Infrastructure | NCC Group
  10. Weak Passwords Led to (SafePay) Ransomware
  11. Public Report: XMTP MLS Implementation Review | NCC Group
  12. Phish Supper: An Incident Responder’s Bread and Butter
  13. Analyzing Secure AI Design Principles
  14. Defending Your Directory: An Expert Guide to Mitigating Pass-the-Hash Attacks in Active Directory
  15. Defending Your Directory: An Expert Guide to Fortifying Active Directory Against LDAP Injection Threats | NCC Group
  16. Public Report: eBPF Verifier Code Review | NCC Group
  17. Defending Your Directory: An Expert Guide to Fortifying Active Directory Certificate Services (ADCS) Against Exploitation
  18. Nameless and shameless: Ransomware Encryption via BitLocker
  19. Defending Your Directory: An Expert Guide to Securing Active Directory Against DCSync Attacks
  20. Defending Your Directory: An Expert Guide to Combating Kerberoasting in Active Directory | NCC Group
  21. Treat your points as cash
  22. Auditing K3s Clusters
  23. Public Report: WhatsApp Contacts Security Assessment
  24. Comparing AI Against Traditional Static Analysis Tools to Highlight Buffer Overflows | NCC Group
  25. Technical advisory xiaomi 13 pro code execution via getapps dom cross site scripting xss
  26. Applying normalised compression distance for architecture classification
  27. Public report security risks of ai hardware for personal and edge computing devices
  28. Zulu
  29. Zcash cryptography and code review
  30. Zcash overwinter consensus and sapling cryptography review
  31. Zigtools an open source 802154 framework
  32. Whitepaper hardware backed heist extracting ecdsa keys from qualcomm s trustzone
  33. Whitepaper coinbugs enumerating common blockchain implementation level vulnerabilities
  34. Webinar 4 secrets to a robust incident response plan
  35. Weak randomness part i linear congruential random number generators
  36. Weaknesses and best practices of public key kerberos with smart cards
  37. Vulnerabilities found in geofencing apps
  38. Vulnerability overview ghost cve 2015 0235
  39. Wastedlocker a new ransomware variant developed by the evil corp group
  40. Car parking apps vulnerable to hacks
  41. Vlan hopping
  42. Voip security methodology and results
  43. Violating the virtual channel rdp testing
  44. Cert c secure coding standard
  45. Cert oracle secure coding standard for java
  46. Virtual access monitor multiple sql injection vulnerabilities
  47. Visualising firewall rulesets simplifying firewall administration and spotting the pivot point
  48. Vehicle emissions and cyber security
  49. Violating database enforced security mechanisms
  50. Using sharepoint as a phishing platform
  51. Vaccine misinformation part 1 misinformation attacks as a cyber kill chain
  52. Variations in exploit methods between linux and windows
  53. Using graph databases to assess the security of thingernets based on the thingabilities and thingertivity of things
  54. Using semgrep with jupyter notebook files
  55. Username enumeration techniques and their value
  56. Using aws and azure for cost effective log ingestion with data processing pipelines for siems
  57. Use and enforce multi factor authentication
  58. Use of deserialisation in net framework methods and classes
  59. Usb keyboards by post use of embedded keystroke injectors to bypass autorun restrictions on modern desktop operating systems
  60. Usb under the bonnet implications of usb security vulnerabilities in vehicle systems
  61. Usb undermining security barriersfurther adventures with usb
  62. Updated technical advisory and proofs of concept multiple vulnerabilities in u boot cve 2022 30790 cve 2022 30552
  63. Usb attacks need physical access right not any more
  64. Unveiling the dark side a deep dive into active ransomware families
  65. Understanding the insider threat how to mitigate it
  66. Understanding the root cause of f5 networks k52145254 tmui rce vulnerability cve 2020 5902
  67. Unmasking lorenz ransomware a dive into recent tactics techniques and procedures
  68. Understanding ransomware impact evolution and defensive strategies
  69. Understanding the impact of ransomware on patient outcomes do we know enough
  70. Understanding microsoft word ole exploit primitives
  71. Understanding microsoft word ole exploit primitives exploiting cve 2015 1642 microsoft office ctasksymbol use after free vulnerability
  72. Understanding ransomware
  73. Understanding and hardening linux containers
  74. Understanding cyber risk management vs uncertainty with confidence in 2017
  75. Umap
  76. Unauthenticated xml external entity xxe vulnerability
  77. Typofinder
  78. U plug we play
  79. Uk government cyber security guidelines for connected autonomous vehicles
  80. Turla png dropper is back
  81. Tybocer
  82. Trust in the new internet survey
  83. Trusted gateway
  84. Trust in the internet survey
  85. Tpm genie
  86. Tpm genie interposer attacks against the trusted platform module serial bus
  87. Top of the pops three common ransomware entry techniques
  88. Tor browser research report released
  89. Toxic tokens using uuids for authorization is dangerous even if they re cryptographically random
  90. Tool wstalker an easy proxy to support web api assessments
  91. Tool release you ll never ever take me alive
  92. Tool update ruby trace a low level tracer for ruby
  93. Tool release sslyze v08 released
  94. Tool release tcpprox
  95. Tool release yontma
  96. Tool release ssl pinning bypass and other android tools
  97. Tool release sslyze v 09 released heartbleed edition
  98. Tool release sinking u boots with depthcharge
  99. Tool release peachfarmer
  100. Tool release redirecting traffic with dnsredirpy
  101. Tool release ios secure state preservation
  102. Tool release ios ssl kill switch v05 released
  103. Tool release introducing opinel scout2 s favorite tool
  104. Tool release dibf tool suite
  105. Tool release exploring ssl pinning on ios
  106. Tool release code credential scanner ccs
  107. Tool release code query cq
  108. Tool release blackbox ios app analysis with introspy
  109. Tool release calculating sql permissions
  110. Cross execute your linux binaries don t cross compile them
  111. Tool release cartographer
  112. Tool release blackbox android app analysis with introspy
  113. Cryptopals exploiting cbc padding oracles
  114. Tool release web3 decoder burp suite extension
  115. Tool release a simple dll injection utility
  116. Tool release announcing the release of rtspfuzzer
  117. Tool release scoutsuite 590
  118. Tool release socks over rdp now works with citrix
  119. Tool release scoutsuite 5110
  120. Cve 2018 8611 exploiting windows ktm part 25 patch analysis and basic triggering
  121. Tool release scoutsuite 5130
  122. Tool release jwt reauth
  123. Tool release reliably checked string library binding
  124. Tool release scoutsuite 510
  125. Tool release solitude a privacy analysis tool
  126. Tool release winstrument an instrumentation framework for windows application assessments
  127. Cve 2021 31956 exploiting the windows kernel ntfs with wnf part 2
  128. Tool release socks over rdp
  129. Tool release scoutsuite 580
  130. Tool release shouganaiyo loader a tool to force jvm attaches
  131. Tool release project kubescout adding kubernetes support to scout suite
  132. Tool release scoutsuite 5120
  133. Tool release monkey365
  134. Tool release principal mapper v110 update
  135. Tool release ghostrings
  136. Tool release httpsignatures a burp suite extension implementing http signatures
  137. Dangers of kubernetes iam integrations
  138. Tool release icpin an integrity check and anti debug detection pintool
  139. Tool release collaboratorplusplus
  140. To dock or not to dock that is the question using laptop docking stations as hardware based attack platforms
  141. Toner deaf printing your next persistence hexacon 2022
  142. Tool windows executable memory page delta reporter
  143. Tis the season to be
  144. Tlspretense ssltls client testing framework
  145. Threats and vulnerabilities within the maritime and shipping sectors
  146. Deception engineering exploring the use of windows service canaries against ransomware
  147. Time trial racing towards practical remote timing attacks
  148. Threat profiling microsoft sql server
  149. Decoder improved burp suite plugin release part two
  150. Threat spotlight hydra
  151. Threat intelligence benefits for the enterprise
  152. Threat modelling cloud platform services by example google cloud storage
  153. Thin clients slim security
  154. Third party assurance
  155. Defeating windows dep with a custom rop chain
  156. There s another hole in your soc unisoc rom vulnerabilities
  157. They ought to know better exploiting security gateways via their web interfaces
  158. The why behind web application penetration test prerequisites
  159. There s a hole in your soc glitching the mediatek bootrom
  160. The spelling police searching for malicious http servers by identifying typos in http responses
  161. The ssl conservatory
  162. Denial of service in parsing a url by ierutildll
  163. The update framework tuf security assessment
  164. Detecting and hunting for the petitpotam ntlm relay attack
  165. The sorry state of aftermarket head unit security
  166. Detecting and protecting when remote desktop protocol rdp is open to the internet
  167. The phishing guide understanding preventing phishing attacks
  168. The role of security research in improving cyber security
  169. The password is dead long live the password
  170. The pentesters guide to akamai
  171. The pharming guide understanding and preventing dns related attacks by phishers
  172. Detecting mimikatz with busylight
  173. The paillier cryptosystem with applications to threshold ecdsa
  174. The next c language standard c23
  175. The myth of twelve more bytes security on the post scarcity internet
  176. The importance of a cryptographic review
  177. Disabling office macros to reduce malware infections
  178. The l4m3ne55 of passw0rds notes from the field
  179. The future of c code review
  180. The extended aws security ramp up guide
  181. The factoring dead preparing for the cryptopocalypse
  182. The facts about badusb
  183. The economics of defensive security
  184. The disadvantages of a blacklist based approach to input validation
  185. The death of usb autorun and the rise of the usb keyboard
  186. The demise of signature based antivirus
  187. The cis security standard for docker available now
  188. The challenges of fuzzing 5g protocols
  189. The case of missing file extensions
  190. The abcs of nfc chip security
  191. The automotive threat modeling template
  192. Testing infrastructure as code using dynamic tooling
  193. Testing two factor authentication
  194. The 9 lives of bleichenbacher s cat new cache attacks on tls implementations
  195. Technical advisory unauthenticated sql injection in lansweeper
  196. Testing http2 only web services
  197. Ebpf adventures fiddling with the linux kernel and unix domain sockets
  198. Technical advisory sonos era 100 secure boot bypass through unchecked setenv call
  199. Technical advisory sql injection and reflected cross site scripting xss vulnerabilities in oracle communications diameter signaling router cve 2020 14787 cve 2020 14788
  200. Technical advisory stored and reflected xss vulnerability in nagios log server cve 2021 35478 cve 2021 35479
  201. Technical advisory shell injection in sourcetree
  202. Technical advisory ruby on rails possible xss vulnerability in actionview tag helpers cve 2022 27777
  203. Technical advisory shell injection in macvim mvim uri handler
  204. Technical advisory reflected cross site scripting xss vulnerability in jenkins delivery pipeline plugin
  205. Technical advisory remote shell commands execution in ttyd
  206. Technical advisory pulse connect secure rce via uncontrolled gzip extraction cve 2020 8260
  207. Technical advisory pulse connect secure arbitrary file read via logon message cve 2020 8255
  208. Technical advisory pulse connect secure rce via uncontrolled archive extraction cve 2021 22937 patch bypass
  209. Technical advisory os command injection in silver peak edgeconnect appliances cve 2020 12148 cve 2020 12149
  210. Technical advisory nexpose hard coded java key store passphrase allows decryption of stored credentials
  211. Technical advisory multiple vulnerabilities in manageengine desktop central
  212. Technical advisory multiple vulnerabilities in lexmark printers
  213. Technical advisory multiple vulnerabilities in mailenable
  214. Exploiting ms15 061 use after free windows kernel vulnerability
  215. Technical advisory multiple vulnerabilities in hp printers
  216. Technical advisory mosquitto broker dos through a memory leak vulnerability
  217. Technical advisory multiple vulnerabilities in accellion file transfer appliance
  218. Technical advisory intel driver support assistance local privilege escalation
  219. Technical advisory heartbleed chained with a pass the hash attack leads to device compromise on tp link c200 ip camera
  220. Technical advisory insufficient proxyman helpertool xpc validation
  221. Technical advisory dell supportassist local privilege escalation cve 2021 21518
  222. Technical advisory cve 2017 8592 xmlhttprequest in ie followed 307 redirections with additional or customised headers
  223. Technical advisory citrix workspace receiver remote code execution vulnerability
  224. Technical advisory bypassing microsoft xoml workflows protection mechanisms using deserialisation of untrusted data
  225. Technical advisory authentication bypass in libssh
  226. Technical advisory authentication rule bypass
  227. Technical advisory adobe coldfusion rmi registrybind deserialisation rce
  228. Technical advisory adobe coldfusion object deserialisation rce
  229. Technical advisory rohnp key extraction side channel in multiple crypto libraries
  230. Technical advisory administrative passcode recovery and authenticated remote buffer overflow vulnerabilities in gigaset dx600a handset cve 2021 25309 cve 2021 25306
  231. Finding and exploiting net remoting over http using deserialisation
  232. Technical advisory sonicwall sma 100 series unauthenticated file upload path traversal cve 2021 20040
  233. Technical advisory gaining root access on sumpple s610 ip camera via telnet and unprotected client and server data transmission between android and ios clients
  234. Technical advisory sonicwall sma 100 series unauthenticated arbitrary file deletion
  235. Technical advisory sercomm h500s authenticated remote command execution cve 2021 44080
  236. Technical advisory sonicwall global management system gms analytics multiple critical vulnerabilities
  237. Technical advisory null pointer derefence in mcafee drive encryption cve 2021 23893
  238. Flash local with filesystem bypass in navigatetourl
  239. Technical advisory ollama dns rebinding attack cve 2024 28224
  240. Freddy an extension for automatically identifying deserialisation issues in java and net applications
  241. Technical advisory multiple vulnerabilities in nagios xi
  242. Technical advisory multiple vulnerabilities in juplink rx4 1800 wifi router cve 2022 37413 cve 2022 37414
  243. Technical advisory linksys wrt160nl authenticated remote buffer overflow cve 2020 26561
  244. Technical advisory multiple vulnerabilities in faronics insight cve 2023 28344 cve 2023 28345 cve 2023 28346 cve 2023 28347 cve 2023 28348 cve 2023 28349 cve 2023 28350 cve 2023 28351 cve 2023 28352 cve 2023 28353
  245. Technical advisory linksys wrt160nl authenticated command injection cve 2021 25310
  246. Technical advisory jitsi meet electron limited certificate validation bypass cve 2020 27161
  247. Technical advisory ictfax 7 4 indirect object reference
  248. Technical advisory jitsi meet electron arbitrary client remote code execution cve 2020 27162
  249. Technical advisory wolfssl tls 13 client man in the middle attack cve 2020 24613
  250. Technical advisory apple macos xar arbitrary file write cve 2022 22582
  251. Technical advisory vmware tools multiple vulnerabilities
  252. Technical advisory tesla ble phone as a key passive entry vulnerable to relay attacks
  253. Technical advisory u boot unchecked download size and direction in usb dfu cve 2022 2347
  254. Technical advisory sonicwall sma 100 series unauthenticated stored xss
  255. Technical advisory sunhillo sureline unauthenticated os command injection cve 2021 36380
  256. Technical advisory sonicwall sma 100 series multiple unauthenticated heap based and stack based buffer overflow cve 2021 20045
  257. Technical advisory sonicwall sma 100 series post authentication remote command execution cve 2021 20044
  258. Technical advisory sonicwall sma 100 series heap based buffer overflow cve 2021 20043
  259. Technical advisory pulse connect secure rce via template injection cve 2020 8243
  260. Technical advisory shop app sends pasteboard data to shopify s servers
  261. Technical advisory play pac4j authentication rule bypass
  262. Technical advisory playsms pre authentication remote code execution cve 2020 8644
  263. Technical advisory parceltrack sends all pasteboard data to parceltrack s servers on startup
  264. Technical advisory openofficeorg multiple memory corruption vulnerabilities
  265. Technical advisory nxp imx sdp read disable fuse bypass cve 2022 45163
  266. Technical advisory open5gs stack buffer overflow during pfcp session establishment on upf cve 2021 41794
  267. Technical advisory nullsoft scriptable installer system nsis insecure temporary directory usage
  268. Technical advisory new york state excelsior pass vaccine passport credential forgery
  269. Technical advisory new york state excelsior pass vaccine passport scanner app sends data to a third party not specified in privacy policy
  270. Technical advisory multiple vulnerabilities in u boot cve 2022 30790 cve 2022 30552
  271. Technical advisory multiple vulnerabilities in nuki smart locks cve 2022 32509 cve 2022 32504 cve 2022 32502 cve 2022 32507 cve 2022 32503 cve 2022 32510 cve 2022 32506 cve 2022 32508 cve 2022 32505
  272. Technical advisory macos installer local root privilege escalation cve 2020 9817
  273. Technical advisory libraptor xxe in rdfxml file interpretation
  274. Technical advisory linux rds protocol local privilege escalation
  275. Technical advisory kwiktag web admin authentication bypass
  276. Technical advisory lenovo imcontroller local privilege escalation cve 2021 3922 cve 2021 3969
  277. Hitbams your not so home office soho hacking at pwn2own
  278. Technical advisory kwiksetweiser ble proximity authentication in kevo smart locks vulnerable to relay attacks
  279. Technical advisory ibm tam remote directory traversal and file retrieval via web server plug in
  280. Technical advisory ibm websphere commerce encrypted url parameter vulnerable to padding oracle attacks
  281. How i did not get a shell
  282. Technical advisory garuda linux insecure user creation cve 2021 3784
  283. Technical advisory htc iqrd android permission leakage
  284. Technical advisory freepbx multiple authenticated sql injections in ucp application
  285. Technical advisory fujitsu centricstor control center v81 unauthenticated command injection cve 2022 31794 and cve 2022 31795
  286. How organisations can properly configure ssl services to ensure the integrity and confidentiality of data in transit
  287. Technical advisory expresslrs vulnerabilities allow for hijack of control link
  288. Technical advisory coda filesystem kernel memory disclosure
  289. Technical advisory deltek vision arbitrary sql execution sqli
  290. Technical advisory bomgar remote support local privilege escalation
  291. Technical advisory citrix access gateway command injection vulnerability
  292. Technical advisory authorization bypass allows for pinboard corruption
  293. Technical advisory ble proximity authentication vulnerable to relay attacks
  294. Technical advisory authenticated sql injection in soap request in broadcom ca network flow analysis cve 2021 44050
  295. Technical advisory arbitrary signature forgery in stark bank ecdsa libraries cve 2021 43572 cve 2021 43570 cve 2021 43569 cve 2021 43568 cve 2021 43571
  296. Technical advisory arm mbedos usb mass storage driver memory corruption
  297. Technical advisory apple xar arbitrary file write cve 2021 30833
  298. Technical advisory arbitrary file read in dell wyse management suite cve 2021 21586 cve 2021 21587
  299. Technical advisory apple hfsplus information disclosure vulnerability
  300. Technical advisory apple ios osx foundation nsxmlparser xxe vulnerability
  301. Tcpprox
  302. Tandberg video communication server static ssh host keysn
  303. Ig learner walkthrough
  304. Tattler
  305. Immortalising 20 years of epic research
  306. Tandberg video communication server arbitrary file retrieval
  307. Tandberg video communication server authentication bypass
  308. Ta505 a brief history of their time
  309. Tales of windows detection opportunities for an implant framework
  310. Ta505 exploits solarwinds serv u vulnerability cve 2021 35211 for initial access
  311. Sysinternals sdelete when secure delete fails
  312. Syspwn vr for pwn2own
  313. Sysaid helpdesk pro blind sql injection
  314. Improving software security through c language standards
  315. Sysaid helpdesk stored xss
  316. Symantec pc anywhere remote code extecution
  317. Sysaid helpdesk blind sql injection
  318. Symantec messaging gateway ssh with backdoor user account plus privilege escalation to root due to very old kernel
  319. Symantec messaging gateway easy csrf to add a backdoor administrator for example
  320. Symantec messaging gateway out of band stored xss delivered by email
  321. Symantec messaging gateway unauthorised ssh access
  322. Symantec messaging gateway arbitrary file download is possible with a crafted url authenticated
  323. Symantec messaging gateway out of band stored xss via email
  324. Symantec messaging gateway unauthenticated detailed version disclosure
  325. Symantec messaging gateway addition of a backdoor adminstrator via csrf
  326. Symantec messaging gateway authenticated arbritary file download
  327. Symantec message filter session hijacking via session
  328. Symantec message filter unauthenticated verbose software version information disclosure
  329. Symantec backup exec 2012 backuprestore data traverses memory with weak acls
  330. Symantec backup exec 2012 os version and service pack information leak
  331. Symantec backup exec 2012 persistent xss vulnerability affecting custom reports
  332. Symantec backup exec 2012 backup exec utility stored xss when adding groups servers and computers
  333. Symantec backup exec 2012 linux backup agent heap overflow
  334. Supply chain security begins with secure software development
  335. Streamdivert relaying specific network connections
  336. Striking back at retired cobalt strike a look at a legacy vulnerability
  337. Stopping automated attack tools
  338. Story of a hundred vulnerable jenkins plugins
  339. Stepping insyde system management mode
  340. Ios 7 tool updates
  341. Ios application security the definitive guide for hackers and developers
  342. Stepping stones a red team activity hub
  343. State of the art email risk
  344. Sslyze v08
  345. State of dns rebinding in 2023
  346. Ssl checklist for pentesters
  347. Sslyze v07 released
  348. Squiz cms file path traversal
  349. Spy pi do you trust your laptop docking stations
  350. Spectre on a television
  351. Isec completes truecrypt audit
  352. Spectre and meltdown what you need to know
  353. Some notes about the xen xsa 122 bug
  354. Solaris 11 usb hubclass
  355. Isec reviews securedrop
  356. Some musings on common ebpf linux tracing bugs
  357. Solaris 11 usb hub class descriptor kernel stack overflow
  358. Software based fault injection countermeasures part 23
  359. Software verification and analysis using z3
  360. Software security austerity security debt in modern software development
  361. Social engineering
  362. Java coding guidelines 75 recommendations for reliable and secure programs
  363. Sobelow static analysis for the phoenix framework
  364. Soc maturity capability
  365. Sobelow update
  366. Jenkins plugins and core technical summary advisory
  367. So long and thanks for all the 0day
  368. Smuggling hta files in internet exploreredge
  369. Sniffle a sniffer for bluetooth 5
  370. Smb hash hijacking user tracking in ms outlook
  371. Smart contracts inside sgx enclaves common security bug patterns
  372. Slotting security into corporate development
  373. Smack skip tls freak ssltls vulnerabilities
  374. Sign over your hashes stealing netntlm hashes via outlook signatures
  375. Signaturing an authenticode anomaly with yara
  376. Singularity of origin
  377. Siam ag23 algebraic geometry with friends
  378. Lights camera hacked an insight into the world of popular ip cameras
  379. Shocker
  380. Local network compromise despite good patching
  381. Shellshock bash vulnerability
  382. Shining new light on an old rom vulnerability secure boot bypass via dcd and csf tampering on nxp imx devices
  383. Sharkbot a new generation android banking trojan being distributed on google play store
  384. Shell arithmetic expansion and evaluation abuse
  385. Shellshock advisory
  386. Shaking the foundation of an online collaboration tool microsoft 365 top 5 attacks vs the cis microsoft 365 foundation benchmark
  387. Sharkbot is back in google play
  388. Setting a new standard for kubernetes deployments
  389. Machine learning 101 the integrity of image mis classification
  390. Settlers of netlink exploiting a limited uaf in nf tables cve 2022 32250
  391. Security of things an implementer s guide to cyber security for internet of things devices and beyond
  392. Security of things an implementers guide to cyber security for internet of things devices and beyond
  393. Security first umbrella
  394. Security code review with chatgpt
  395. Mallory and me setting up a mobile mallory gateway
  396. Security compliance as an engineering discipline
  397. Security considerations of zk snark parameter multi party computation
  398. Securing the continuous integration process
  399. Security best practice host naming url conventions
  400. Securing google cloud platform ten best practices
  401. Securing plsql applications with dbms assert
  402. Securing teradata database
  403. Securecisco
  404. Matty mcmattface security implications mitigations testing strategies for biometric facial recognition systems
  405. Securecookies
  406. Secureieactivex
  407. Secure session management with cookies for web applications
  408. Securebigip
  409. Secure device manufacturing supply chain security resilience
  410. Secure device provisioning best practices heavy truck edition
  411. Secure messaging for normal people
  412. Second order code injection attacks
  413. Secure application development on facebook
  414. Scenester
  415. Scenester a small tool for cross platform web application
  416. Scomplicated decrypting scom runas credentials
  417. Saml pummel
  418. Saml xml injection
  419. Samba netr serverpasswordset expoitability analysis
  420. Samba andx request remote code execution
  421. Meshyjson a tp link tdpserver json stack overflow
  422. Samba on the blackberry playbook
  423. Sakula an adventure in dll planting
  424. Metastealer filling the racoon void
  425. Salesforce security with remote working
  426. Ruxcon 2013 introspy presentation slides
  427. Rtspfuzzer
  428. Ruling the rules
  429. Mitigating the top 10 security threats to gcp using the cis google cloud platform foundation benchmark
  430. Rust for security and correctness in the embedded world
  431. Rokrat analysis
  432. Rsa conference mobile threat war room
  433. Modelling threat actor phishing behaviour
  434. Rise of the sensors securing lorawan networks
  435. Modernizing legacy systems software technologies engineering processes and business practices
  436. Rm3 curiosities of the wildest banking malware
  437. Rigging the vote uniqueness in verifiable random functions
  438. Rise of the machines machine learning its cyber security applications
  439. Rift detection capabilities for recent f5 big ipbig iq icontrol rest api vulnerabilities cve 2021 22986
  440. Rift f5 cve 2020 5902 and citrix cve 2020 8193 cve 2020 8195 and cve 2020 8196 honeypot data release
  441. Rift f5 networks k52145254 tmui rce vulnerability cve 2020 5902 intelligence
  442. Ricochet security assessment public report
  443. Rift analysing a lazarus shellcode execution method
  444. Multiple security vulnerabilities in sap netweaver bsp logon
  445. Rift citrix adc vulnerabilities cve 2020 8193 cve 2020 8195 and cve 2020 8196 intelligence
  446. Multiple vulnerabilities in mailenable
  447. Reverse reveal recover windows defender quarantine forensics
  448. Reviewing verifiable random functions
  449. Reverse engineering coin hunt world s binary protocol
  450. Return of the hidden number problem
  451. Revealing embedded fingerprints deriving intelligence from usb stack interactions
  452. Revealing embedded fingerprints deriving intelligence from usb stack interactions 2013
  453. Research report zephyr and mcuboot security assessment
  454. Retro gaming vulnerability research warcraft 2
  455. Research insights volume 9 modern security vulnerability discovery
  456. Research paper machine learning for static malware analysis with university college london
  457. Research paper recovering deleted data from the windows registry
  458. Ncc group connected health whitepaper july 2019
  459. Research insights volume 7 exploitation advancements
  460. Research insights volume 8 hardware design fpga security risks
  461. Research insights volume 4 sector focus maritime sector
  462. Research insights volume 5 sector focus automotive
  463. Research insights volume 6 common issues with environment breakouts
  464. Research insights volume 1 sector focus financial services
  465. Research insights volume 2 defensive trends
  466. Research insights volume 3 how are we breaking in mobile security
  467. Remote exploitation of microsoft office dll hijacking ms15 132 via browsers
  468. Replicating cves with klee
  469. Remote code execution in impresspages cms
  470. Remote code execution on western digital pr4100 nas cve 2022 23121
  471. Remote directory traversal and file retrieval
  472. Ncc group s exploit development capability why and what
  473. Ncloader
  474. Real world cryptography conference 2021 a virtual experience
  475. Real world cryptography conference 2022
  476. Real world cryptography conference 2023 part i
  477. Netgear routers a playground for hackers
  478. Readable thrift
  479. Readable thrift 1
  480. Ragweed
  481. Nine years of bugs at ncc group
  482. Ransomware how vulnerable is your system
  483. Ransomware what organisations can do to survive
  484. Python class informer an idapython plugin for viewing run time type information rtti
  485. Quantum cryptography a study into present technologies and future applications
  486. Pysimreader
  487. Pumping iron on the musl heap real world cve 2022 24834 exploitation on an alpine mallocng heap
  488. Public report aleo snarkos implementation and consensus mechanism review
  489. North korea s lazarus their initial access trade craft using social media and social engineering
  490. Puckungfu a netgear wan command injection
  491. Offensivecon 2023 exploit engineering attacking the linux kernel
  492. Public report aws nitro system api security claims italian
  493. Public report aws nitro system api security claims spanish
  494. Public report aws nitro system api security claims
  495. Public report aws nitro system api security claims french
  496. Public report aws nitro system api security claims german
  497. Public report zcash frost security assessment
  498. Online casino roulette a guideline for penetration testers and security researchers
  499. Public report aleo snarkvm implementation review
  500. Public report zendoo proof verifier cryptography review
  501. Public report entropyrust cryptography review
  502. Public report solana program library zk token security assessment
  503. Public report whatsapp opaque ke cryptographic implementation review
  504. Public report zcash nu5 cryptography review
  505. Public report zcash zebra security assessment
  506. Public report vpn by google one technical security privacy assessment
  507. Public report whatsapp auditable key directory akd implementation review
  508. Public report whatsapp end to end encrypted backups security assessment
  509. Public report threshold ecdsa cryptography review
  510. Public report vpn by google one security assessment
  511. Public report qredo apache milagro mpc cryptographic assessment
  512. Public report rustcrypto aesgcm and chacha20pluspoly1305 implementation review
  513. Public report security review of rsa blind signatures with public metadata
  514. Public report pixel 44xl and pixel 4a ioxt audit
  515. Public report protocol labs groth16 proof aggregation cryptography and implementation review
  516. Public report o 1 labs mina client sdk signature library and base components cryptography and implementation review
  517. Public report penumbra labs decaf377 implementation and poseidon parameter selection review
  518. Public report penumbra labs r1cs implementation review
  519. Public report kubernetes 124 security audit
  520. Public report lantern and replica security assessment
  521. Public report matrix olm cryptographic review
  522. Public report iov labs powhsm security assessment
  523. Public report keyfork implementation review
  524. Public report go cose security assessment
  525. Public report google enterprise api security assessment
  526. Public report google privacy sandbox aggregation service and coordinator
  527. Public report dell secured component verification
  528. Public report electric coin company nu4 cryptographic specification and implementation review
  529. Public report confidential mode for hyperdisk dek protection analysis
  530. Public report confidential space security review
  531. Public report android cloud backuprestore
  532. Public report blst cryptographic implementation review
  533. Public report caliptra security assessment
  534. Public report coda cryptographic review
  535. Past present and future of effective c
  536. Public report filecoin bellman and bls signatures cryptographic review
  537. Proxy re encryption protocol ironcore public report
  538. Prtg network monitor command injection
  539. Public cloud
  540. Protecting stored cardholder data an unofficial supplement to pci dss v30
  541. Project triforce run afl on everything
  542. Properly signed certificates on cpe devices
  543. Project ava on the matter of using machine learning for web application security testing part 9 adventures with expert systems
  544. Pip3line the swiss army knife of byte manipulation
  545. Project bishop clustering web pages
  546. Popping blisters for research an overview of past payloads and exploring recent developments
  547. Project ava on the matter of using machine learning for web application security testing part 4 architecture and design
  548. Private sector cyber resilience and the role of data diodes
  549. Potential false redirection of web site content in internet in sap netweaver web applications
  550. Practical considerations of right to repair legislation
  551. Preparing for cyber battleships electronic chart display and information system security
  552. Principal mapper pmapper
  553. Premium practical law content gateway
  554. Premium practical law content gateway 2
  555. Premium security content gateway
  556. Practical machine learning for random filename detection
  557. Practical sme security on a shoestring
  558. Premium content gateway
  559. Professional c programming livelessons video training part i writing robust secure reliable code
  560. Project ava on the matter of using machine learning for web application security testing part 1 understanding the basics and what platforms and frameworks are available
  561. Project ava on the matter of using machine learning for web application security testing part 10 efficacy demonstration project conclusion and next steps
  562. Porting the misfortune cookie exploit a look into router exploitation using the td 8817
  563. Post exploiting a compromised etcd full control over the cluster and its nodes
  564. Project ava on the matter of using machine learning for web application security testing part 2 going off on a tangent aiml applications in social engineering
  565. Project ava on the matter of using machine learning for web application security testing part 3 understanding existing approaches and attempts
  566. Post quantum cryptography overview
  567. Port scan automation
  568. Project ava on the matter of using machine learning for web application security testing part 5 development of prototype 1 text processing and semantic relationships
  569. Project ava on the matter of using machine learning for web application security testing part 6 development of prototype 2 creating a sqli poc
  570. Poc2021 pwning the windows 10 kernel with ntfs and wnf slides
  571. Pointer sequence reverser psr
  572. Project ava on the matter of using machine learning for web application security testing part 7 development of prototype 3 adventures in anomaly detection
  573. Project ava on the matter of using machine learning for web application security testing part 8 development of prototype 4 building on takaesu s approach with focus on xss
  574. Poison ivy string decryption
  575. Phishing stories
  576. Pip3line
  577. Phantap phantom tap making networks spookier one packet at a time
  578. Phishing mitigations configuring microsoft exchange to clearly identify external emails
  579. Peeling back the layers on defence in depth knowing your onions
  580. Proxmon
  581. Perfect forward security
  582. Payment card industry data security standard pci dss a navigation and explanation of changes from v20 to v30
  583. Pdf form filling and flattening tool buffer overflow
  584. Peachfarmer
  585. Passive information gathering the analysis of leaked network security information
  586. Password and brute force mitigation policies
  587. Paradoxical compression with verifiable delay functions
  588. Passive decryption of ethereum peer to peer traffic
  589. Pairing over bls12 381 part 2 curves
  590. Pairing over bls12 381 part 3 pairing
  591. Paper thematic for success in real world offensive cyber operations how to make threat actors work harder and fail more often
  592. Package play
  593. Public report electric coin company nu3 specification and blossom implementation audit
  594. Padding the struct how a compiler optimization can disclose stack memory
  595. Pairing over bls12 381 part 1 fields
  596. Overview of modern memory security concerns
  597. Owning the virgin media hub 30 the perfect place for a backdoor
  598. Os x lion usb hub class descriptor arbitrary code execution
  599. Osquery application security assessment public report
  600. Osx afpserver remote code execution
  601. Oracle retail invoice manager sql injection
  602. Order details screens and pii
  603. Os x 1066 camera raw library memory corruption
  604. Oracle passwords and orabrute
  605. Oracle retail integration bus manager directory traversal
  606. Oracle gridengine sgepasswd buffer overflow
  607. Oracle hyperion 11 directory traversal
  608. Oracle java installer adds a system path which is writable by all
  609. Oracle forensics part 5 finding evidence of data theft in the absence of auditing
  610. Oracle forensics part 6 examining undo segments flashback and the oracle recycle bin
  611. Oracle forensics part 7 using the oracle system change number in forensic investigations
  612. Oracle forensics part 3 isolating evidence of attacks against the authentication mechanism
  613. Oracle forensics part 4 live response
  614. Oracle e business suite pre auth sqli with dba privileges
  615. Oracle forensics part 1 dissecting the redo logs
  616. Oracle forensics part 2 locating dropped objects
  617. Oracle 11g tns listener remote invalid pointer read
  618. Oracle 11g tns listener remote null pointer dereference
  619. Optimizing pairing based cryptography montgomery arithmetic in rust
  620. Optimizing pairing based cryptography montgomery multiplication in assembly
  621. Optimum routers researching managed routers
  622. Open banking security considerations potential risks
  623. On multiplications with unsaturated limbs
  624. On the malicious use of large language models like gpt 3
  625. On the use of pedersen commitments for confidential payments
  626. Nx server for linux arbitrary files can be read with root privileges
  627. On linux s random number generation
  628. Puckungfu 2 another netgear wan command injection
  629. Nsa cisa kubernetes security guidance a critical review
  630. Non floodnon volumetric distributed denial of service ddos
  631. Non stack based exploitation of buffer overrun vulnerabilities on windows nt 2000 xp
  632. Nist selects post quantum algorithms for standardization
  633. Non obvious pe parsers the net runtime part 1
  634. Non deterministic nature of prompt injection
  635. New sources of microsoft office metadata tool release metadataplus
  636. Network attached security attacking a synology nas
  637. New attack vectors and a vulnerability dissection of ms03 007
  638. Nerve
  639. Nessus authenticated scan local privilege escalation
  640. Real world cryptography conference 2023 part ii
  641. Real world cryptography conference 2024
  642. Ncccodenavi
  643. Ncc group s 2021 annual research report
  644. Ncc group s 2022 2023 research report
  645. Ncc group s jeremy boone recognized for highest quality and most eligible reports through the intel circuit breaker program
  646. Ncc group s juan garrido named to microsoft s msrc office security researcher leaderboard
  647. Ncc group s upcoming trainings at black hat usa 2021
  648. Ncc group whitepaperunderstanding and hardeninglinux containersjune 29 2016 version 11
  649. Ncc group s 2020 annual research report
  650. Ncc group research at black hat usa 2021 and def con 29
  651. Ncc group research at black hat usa 2022 and def con 30
  652. Ncc group researchers named amongst msrc s most valuable security researchers in 2020
  653. Ncc group malware technical note
  654. Ncc group placed first in global 5g cyber security hack competition
  655. Ncc con europe 2022 pwn2own austin presentations
  656. Ncc group co signs the electronic frontier foundation s statement on dmca use against security researchers
  657. Nagios xi network monitor stored and reflected xss
  658. Ncc con europe 2016
  659. Ncc con europe 2017
  660. Nagios xi network monitor stored and reflective xss
  661. Nagios xi network monitor blind sql injection
  662. My hash is my passport understanding web and mobile authentication
  663. Reverse engineering and decrypting cyberark vault credential files
  664. My name is matt my voice is my password
  665. Nagios xi network monitor os command injection
  666. Multiple shell metacharacter injections in afflib
  667. Multiple buffer overflows discovered in afflib
  668. Multiple cisco css ace client certificate and http header
  669. Multiple format string injections in afflib
  670. Mssql lateral movement
  671. Much ado about hardware implants
  672. More advanced sql injection
  673. Mobile web browser credential management security implications attack cases mitigations
  674. Mobile apps and security by design
  675. Mobile world congress mobile internet of things
  676. Microsoft s sql server vs oracle s rdbms
  677. Mining data from cobalt strike beacons
  678. Rustproofing linux part 14 leaking addresses
  679. Rustproofing linux part 24 race conditions
  680. Microsoft sql server passwords
  681. Rustproofing linux part 34 integer overflows
  682. Microsoft zero day vulnerability ole2link threat intelligence and signatures
  683. Rustproofing linux part 44 shared memory
  684. Microsoft announces the wmic command is being retired long live powershell
  685. Microsoft internet explorer cmarkup use after free
  686. Microsoft office memory corruption vulnerability
  687. Metasploitavevasion
  688. Memory scanning for the masses
  689. Mergers acquisitions ma cyber security due diligence
  690. Medium risk vulnerability in symantec network access control
  691. Memory gap
  692. Mcafee email and web security appliance v56 session hijacking and bypassing client side session timeouts
  693. Medical devices a hardware security perspective
  694. Medium risk vulnerability in symantec enterprise security management
  695. Mcafee email and web security appliance v56 any logged in user can bypass controls to reset passwords of other administrators
  696. Mcafee email and web security appliance v56 arbitrary file download is possible with a crafted url when logged in as any user
  697. Secure coding in c and cplusplus
  698. Secure coding in c and cplusplus 2nd edition
  699. Mcafee email and web security appliance v56 password hashes can be recovered from a system backup and easily cracked
  700. Mcafee email and web security appliance session hijacking and bypassing client side session timeouts
  701. Secure coding rules for java livelessons part 1
  702. Mcafee email and web security appliance v56 active session tokens of other users are disclosed within the ui
  703. Mcafee email and web security appliance arbitrary file download is possible with a crafted url when logged in as any user
  704. Mcafee email and web security appliance password hashes can be recovered from a system backup and easily cracked
  705. Mcafee email and web security appliance reflective xss allowing an attacker to gain session tokens
  706. Mature security testing framework
  707. Mcafee email and web security appliance active session tokens of other users are disclosed within the ui
  708. Mcafee email and web security appliance any logged in user can bypass controls to reset passwords of other administrators
  709. Maritime cyber security threats and opportunities
  710. Managing cyber risk in the supply chain
  711. Managing powershell in a modern corporate environment
  712. Manifest explorer
  713. Mallory transparent tcp and udp proxy
  714. Man in the middling non proxy aware wi fi devices with a pineapple
  715. Machine learning for static analysis of malware expansion of research scope
  716. Machine learning from idea to reality a powershell case study
  717. Making new connections leveraging cisco anyconnect client to drop and run payloads
  718. Machine learning 103 exploring llm code generation
  719. Machine learning 104 breaking aes with power side channels
  720. Lumension device control remote memory corruption
  721. Self driving cars the future is now
  722. Machine learning 102 attacking facial authentication with poisoned data
  723. Ltair the lte air interface tool
  724. Lumension device control formerly sanctuary remote memory corruption
  725. Login service security
  726. Logs logs the audit trail features of a successful log management solution
  727. Low cost attacks on smart cards the electromagnetic side channel
  728. Log4j jndi be gone a simple mitigation for cve 2021 44228
  729. Shining the light on black basta
  730. Log4shell reconnaissance and post exploitation network detection
  731. Shooting yourself in the flags jailbreaking the sonos era 100
  732. Live incident blog june global ransomware outbreak
  733. Lessons learned from 50 usb bugs
  734. Libavcodec amv out of array write
  735. Sifting through the spines identifying potential cactus ransomware victims
  736. Libtalloc a gdb plugin for analysing the talloc heap
  737. Lending a hand to the community covenant v07 updates
  738. Lessons learned from 50 bugs common usb driver vulnerabilities
  739. Launching the first in our series of research insights
  740. Ldapfragger bypassing network restrictions using ldap attributes
  741. Leapfrogging pfr implementations
  742. Lapsus recent techniques tactics and procedures
  743. Smartermail stored xss in emails
  744. Latest threats to the connected car intelligent transport ecosystem
  745. Kivlad
  746. Kubernetes security consider your threat model
  747. Snapmc skips ransomware steals data
  748. Lapith
  749. Kerberos resource based constrained delegation when an image change leads to a privilege escalation
  750. Java rmi registrybind unvalidated deserialization
  751. Java web start file inclusion via system properties override
  752. Jackson deserialization vulnerabilities
  753. Social engineering penetration testing
  754. Jailbreak
  755. Jailbreak updated and open sourced
  756. Ism rat
  757. Ivanti zero day threat actors observed leveraging cve 2021 42278 and cve 2021 42287 for quick privilege escalation to domain admin
  758. Isec s analysis of microsoft s sdl and its roi
  759. Isec engages in truecrypt audit
  760. Isec partners releases sslyze
  761. Ip reputation snort rule generator
  762. Is this the real life is this just fantasy caught in a landslide noescape from ncc group
  763. Sql server security
  764. Isec audit of mediawiki
  765. Ios ssl killswitch
  766. Ios user enrollment and trusted certificates
  767. Ios certificate pinning code updated for ios 7
  768. Ios instrumentation without jailbreak
  769. Ios mobileslideshow usb image class arbitrary code executiontxt
  770. Investigating potential security vulnerability manifestation through various analyses inferences regarding internet rfcs and how rfc security might be improved
  771. Iodide
  772. Ios 7 arbitrary code execution in kernel mode
  773. Introduction to aws attribute based access control
  774. Introspy for android
  775. Introducing chuckle and the importance of smb signing
  776. Introducing idb simplified blackbox ios app pentesting
  777. Introduction to anti fuzzing a defence in depth aid
  778. Internet of things security
  779. Introducing azucar
  780. Inter protocol communication
  781. Inter protocol exploitation
  782. Interfacesd to rce
  783. Intel software guard extensions sgx a researcher s primer
  784. Intent fuzzer
  785. Intent sniffer
  786. Integrity destroying malicious code for financial or geopolitical gain a vision of the future
  787. Intel bios advisory memory corruption in hid drivers
  788. Increased exploitation of oracle glassfish server administration console remote authentication bypass
  789. Incremental machine learning by example detecting suspicious activity with zeek data streams river and ja3 hashes
  790. Integrating digitalocean into scoutsuite
  791. Improving your network and application assurance strategy in an environment of increasing 0day vulnerabilities
  792. In depth analysis of the new team9 malware family
  793. Impress pages cms remote code execution
  794. Improving your embedded linux security posture with yocto
  795. Implementing and detecting a pci rootkit
  796. Implementing the castryck decru sidh key recovery attack in sagemath
  797. Immunity debugger buffer overflow
  798. Impact of dns over https doh on dns rebinding attacks
  799. Impersonating gamers with gpt 2
  800. Image io memory corruption
  801. Ietf draft indicators of compromise and their role in attack and defen c s e
  802. Iam user management strategy part 2
  803. Iax voice over ip security
  804. Icsot security the evolution of the purdue model integrating industrial and business networks
  805. Http profiler
  806. Hunting sql injection bugs
  807. Iam user management strategy
  808. How will gdpr impact your communications
  809. How to importing wstalker csv and more into burp suite via import to sitemap extension
  810. Html5 security the modern web browser perspective
  811. How to spot and prevent an eclipse attack
  812. How we breach network infrastructures and protect them
  813. How to backdoor diffie hellman
  814. How to protect yourself your organisation from phishing attacks
  815. How to spot a penetration tester in your network and catch the real bad guys at the same time
  816. How microsoft office knows a document came from the internet and might be dangerous
  817. How much training should staff have on cyber security
  818. How cryptography is used to monitor the spread of covid 19
  819. Hostresolver
  820. House
  821. Hidden cobra volgmer a technical analysis
  822. Hitb phuket 2023 exploiting the lexmark postscript stack
  823. Heartbleed openssl vulnerability
  824. Helping engineering teams tackle security debt in embedded systems u boot configuration auditing introduced in depthcharge v020
  825. Hiccupy
  826. Technical advisory multiple html injection vulnerabilities in kaios pre installed mobile applications
  827. Technical advisory multiple vulnerabilities in connectize g6 ac2100 dual band gigabit wifi router cve 2023 24046 cve 2023 24047 cve 2023 24048 cve 2023 24049 cve 2023 24050 cve 2023 24051 cve 2023 24052
  828. Hdmi hacking displays made interesting
  829. Hdmi ethernet channel
  830. Heartbleed cve 2014 0160 advisory
  831. Technical advisory multiple vulnerabilities in the galaxy app store cve 2023 21433 cve 2023 21434
  832. Hardware security by design esp32 guidance
  833. Harnessing gpus building better browser based botnets
  834. Hackproofing oracle application server
  835. Handy guide to a new fivehands ransomware variant
  836. Hardware embedded systems a little early effort in security can return a huge payoff
  837. Hacking the extensible firmware interface
  838. Hackproofing lotus domino web server
  839. Technical advisory openjdk weak parsing logic in javanetinetaddress and related classes
  840. Hackproofing mysql
  841. Hacking a web application
  842. Hacking appliances ironic exploits in security products
  843. Hacking displays made interesting
  844. Grepify a small tool for code reviewers
  845. Gsmgprs traffic interception for penetration testing engagements
  846. Gizmo
  847. Going auth the rails on a crazy train
  848. Grepify
  849. Getting shell with xamlx files
  850. Ghidra nanomips isa module
  851. Ghost vulnerability cve 2015 0235
  852. General data protection regulation knowing your data
  853. Getting per user conditional access mfa status in azure
  854. G scout
  855. Game security
  856. General data protection regulation are you ready
  857. Fuzzing the easy way using zulu 1
  858. Fuzzing usb devices using frisbee lite
  859. Fuzzbox
  860. Technical advisory lansweeper privilege escalation via csrf using http method interchange cve 2020 13658
  861. Fuzzing rtsp to discover an exploitable vulnerability in vlc
  862. Fuzzing the easy way using zulu
  863. From csv to cmd to qwerty
  864. From ermac to hook investigating the technical differences between two android malware variants
  865. Fpgas security through obscurity
  866. Technical advisory multiple vulnerabilities in netgear prosafe plus jgs516pe gs116ev2 switches
  867. Technical advisory multiple vulnerabilities in pandorafms enterprise
  868. Frisbeelite
  869. Flubot the evolution of a notorious android banking malware
  870. Technical advisory multiple vulnerabilities in trendnet tew 831dr wifi router cve 2022 30325 cve 2022 30326 cve 2022 30327 cve 2022 30328 cve 2022 30329
  871. Technical advisory multiple vulnerabilities in victure wr1200 wifi router cve 2021 43282 cve 2021 43283 cve 2021 43284
  872. Forensic fuzzing tools
  873. Fix bounty
  874. Flash security restrictions bypass file upload by urlrequest
  875. Firmware rootkits the threat to the enterprise
  876. Firstexecution
  877. Five essential machine learning security papers
  878. File fuzzers
  879. Finding the weak link in binaries
  880. Fat finger
  881. Faux disk encryption realities of secure storage on mobile devices
  882. Extracting the payload from a cve 2014 1761 rtf document
  883. Technical advisory adobe coldfusion wddx deserialization gadgets
  884. Extractor
  885. Faster modular inversion and legendre symbol and an x25519 speed record
  886. Extending a thinkst canary to become an interactive honeypot
  887. External enumeration and exploitation of email and web security solutions
  888. Technical advisory bypassing workflows protection mechanisms remote code execution on sharepoint
  889. Exploring verifiable random functions in code
  890. Exporting non exportable rsa keys
  891. Technical advisory code execution by unsafe resource handling in multiple microsoft products
  892. Technical advisory code execution by viewing resource files in net reflector
  893. Exposing vulnerabilities in media software
  894. Exploring prompt injection attacks
  895. Technical advisory command injection
  896. Technical advisory containerd containerd shim api exposed to host network containers cve 2020 15257
  897. Exploring the security privacy of canada s digital proof of vaccination programs
  898. Exploring macos calendar alerts part 1 attempting to execute code
  899. Exploring macos calendar alerts part 2 exfiltrating data cve 2020 3882
  900. Technical advisory cyberark epm non paged pool buffer overflow
  901. Exploring overfitting risks in large language models
  902. Exploiting the win32k xxxenablewndsbarrows use after free cve 2015 0057 bug on both 32 bit and 64 bit
  903. Exploring deepfake capabilities mitigation strategies with university college london
  904. Exploiting samba cve 2015 0240 on ubuntu 1204 and debian 7 32 bit
  905. Exploiting security gateways via web interfaces
  906. Technical advisory ip office stored cross site scripting xss vulnerability
  907. Technical advisory mitel mivoice 5330e memory corruption flaw
  908. Exploiting the sudo baron samedit vulnerability cve 2021 3156 on vmware vcenter server 70
  909. Exploiting plsql injection flaws with only create session privileges
  910. Exploiting rich content
  911. Exploiting cve 2015 2426 and how i ported it to a recent windows 81 64 bit
  912. Technical advisory multiple vulnerabilities in brother printers
  913. Technical advisory multiple vulnerabilities in kyocera printers
  914. Exploiting noisy oracles with bayesian inference
  915. Exploit the fuzz exploiting vulnerabilities in 5g core networks
  916. Exploiting cve 2014 0282
  917. Exploiting cve 2014 0282 1
  918. Experiments in extending thinkst canary part 1
  919. Technical advisory multiple vulnerabilities in ricoh printers
  920. Technical advisory multiple vulnerabilities in smartermail
  921. Exploit mitigations keeping up with evolving and complex softwarehardware
  922. Ethics in security testing
  923. Technical advisory multiple vulnerabilities in xerox printers
  924. Eurocrypt 2023 death of a kem
  925. Exception handling and data integrity in salesforce
  926. Estimating the bit security of pairing friendly curves
  927. Technical advisory pdftron javascript urls allowed in webviewer ui cve 2021 39307
  928. Eternalglue part one rebuilding notpetya to assess real world resilience
  929. Erlang security 101
  930. Enterprise scale seamless onboarding and deployment of azure sentinel using lighthouse for multi tenant environments
  931. Enumerating system management interrupts
  932. Encryption does not equal invisibility detecting anomalous tls certificates with the half space trees algorithm
  933. End of life pragmatism
  934. Endpoint connectivity
  935. Emissary panda a potential new malicious tool
  936. Encryption at rest not the panacea to data protection
  937. Technical advisory smb hash hijacking and user tracking in ms outlook
  938. Edidfuzzer
  939. Elephant in the boardroom survey 2016
  940. Embedded device security certifications
  941. Ebook breach notification under gdpr how to communicate a personal data breach
  942. Technical advisory unauthenticated remote command execution through multiple vulnerabilities in virgin media hub 30
  943. Easyda easy windows domain access script
  944. Ebook do you know how your organisation would react in a real world attack scenario
  945. Ebook planning a robust incident response process
  946. Earlyremoval in the conservatory with the wrench exploring ghidra s decompiler internals to make automatic p code analysis scripts
  947. Easyda
  948. Dynamic linq injection remote code execution vulnerability cve 2023 32571
  949. E mail spoofing and cdontsnewmail
  950. The browser hacker s handbook
  951. Early ccs attack analysis
  952. Drones detect identify intercept and hijack
  953. The cert c coding standard second edition 98 rules for developing safe reliable and secure systems
  954. Drupal vulnerability
  955. Dotnetpaddingoracle
  956. Dotnetpefuzzing
  957. The database hacker s handbook
  958. Double odd elliptic curves
  959. Domestic iot nightmares smart doorbells
  960. Don t throw a hissy fit defend against medusa
  961. The development of a telco attack testing tool
  962. Do not use your aws root account
  963. Does typescript offer security improvements over javascript
  964. Dissecting social engineering attacks
  965. Distributed ledger blockchain security and quantum computing implications
  966. Dns pinning and web proxies
  967. Disclosure policy
  968. Discovering smart contract vulnerabilities with goatcasino
  969. Developing secure mobile applications for android
  970. Dibf updated
  971. The mobile application hacker s handbook
  972. Detecting rclone an effective tool for exfiltration
  973. Detection engineering for kubernetes clusters
  974. Detecting dns implants old kitten new tricks a saitama case study
  975. Detecting karakurt an extortion focused threat actor
  976. Detecting anomalous vectored exception handlers on windows
  977. The shellcoder s handbook discovering and exploiting security holes 2nd edition
  978. Derusbi a case study in rapid capability development
  979. Detecting and hunting for the malicious netfilter driver
  980. Demystifying cobalt strike s make token command
  981. Demystifying multivariate cryptography
  982. Delux edition getting root privileges on the elux thin client os
  983. Demystifying aws assumerole and stsexternalid
  984. Deep dive into real world kubernetes threats
  985. Defeating the stack based buffer overflow prevention mechanism of microsoft windows 2003 server
  986. Decoding network data from a gh0st rat variant
  987. Threat actors exploiting the pandemic
  988. Decrypting openssh sessions for fun and profit
  989. Dectbeacon
  990. Decoder improved burp suite plugin release part one
  991. Deception engineering exploring the use of windows installer packages against first stage payloads
  992. Decoder improved burp suite plugin
  993. Database security a christmas carol
  994. Database servers on windows xp and the unintended consequences of simple file sharing
  995. Ddos common approaches and failings
  996. Data mining with sql injection and inference
  997. Dataarmor full disk encryption 3012c restricted environment breakout privilege escalation and full disk decryption
  998. Tool release carnivore microsoft external assessment tool
  999. Database security brief the oracle critical patch update for april 2007
  1000. Dangling cursor snarfing a new class of attack in oracle
  1001. Tool release enumerating docker registries with go pillage registries
  1002. Darpa onstar vulnerability analysis
  1003. D0nut encrypt me i have a wife and no backups
  1004. Dancing offbit the story of a single character typo that broke a chacha based prng
  1005. Tool release insject a linux namespace injector
  1006. D link dir 850l web admin interface vulnerable to stack based buffer overflow
  1007. D link routers vulnerable to remote code execution rce
  1008. Cyber security in uk agriculture
  1009. Cyber security of new space paper
  1010. Cybervillainsca
  1011. Cyber essentials scheme
  1012. Cyber red teaming business critical systems while managing operational risk
  1013. Cve 2019 1405 and cve 2019 1322 elevation to system via the upnp device host service and the update orchestrator service
  1014. Cve 2021 31956 exploiting the windows kernel ntfs with wnf part 1
  1015. Cve 2018 8611 exploiting windows ktm part 45 from race win to kernel read and write primitive
  1016. Cve 2018 8611 exploiting windows ktm part 55 vulnerability detection and a better readwrite primitive
  1017. Cve 2018 8611 exploiting windows ktm part 15 introduction
  1018. Cve 2018 8611 exploiting windows ktm part 35 triggering the race condition and debugging tricks
  1019. Cve 2017 8570 rtf and the sisfader rat
  1020. Cve 2018 8611 diving into the windows kernel transaction manager ktm for fun and exploitation
  1021. Cups filters remote code execution
  1022. Curve9767 and fast signature verification
  1023. Critical risk vulnerability in sap message server heap overflow
  1024. Cross site request forgery an introduction to a common web application weakness
  1025. Critical risk vulnerability in ingres pointer overwrite 2
  1026. Critical risk vulnerability in sap db web server stack overflow
  1027. Creating arbitrary shellcode in unicode expanded strings
  1028. Creep web app scanner
  1029. Critical risk vulnerability in ingres pointer overwrite 1
  1030. Cranim a toolkit for cryptographic visualization
  1031. Crave the data statistics from 1 300 phishing campaigns
  1032. Creating a safer oauth user experience
  1033. Tool release magisk module conscrypt trust user certs
  1034. Cracking random number generators using machine learning part 1 xorshift128
  1035. Cracking random number generators using machine learning part 2 mersenne twister
  1036. Cracking rdp nla supplied credentials for threat intelligence
  1037. Conti nuation methods and techniques observed in operations post the leaks
  1038. Cowcloud
  1039. Constant time data processing at a secret offset privacy and quic
  1040. Content security policies and popular cms systems
  1041. Content security policies best practices
  1042. Conference talks march 2022
  1043. Conference talks november 2021
  1044. Conference talks october 2021
  1045. Conference talks septemberoctober 2022
  1046. Conference talks december 2021
  1047. Conference talks june 2021
  1048. Conference talks september 2020
  1049. Conference talks september 2021
  1050. Conference talks may 2021
  1051. Tracking a p2p network related to ta505
  1052. Conference talks november 2020
  1053. Conference talks october 2020
  1054. Conference talks june 2022
  1055. Conference talks march 2020
  1056. Conference talks february 2020
  1057. Conference talks februarymarch 2021
  1058. Conference talks january 2020
  1059. Compromising apache tomcat via jmx access
  1060. Conference talks august 2020
  1061. Conference talks december 2020
  1062. Common insecure practices with configuring and extending salesforce
  1063. Common security issues in financially oriented web applications
  1064. Compromising a hospital network for 118 plus postage packaging
  1065. Common flaws of distributed identity and authentication systems
  1066. Command injection in xml signatures and encryption
  1067. Code patterns for api authorization designing for security
  1068. Combating java deserialisation vulnerabilities with look ahead object input streams laois
  1069. Cloudwatch amazon web services shellshock
  1070. Cmakerer a small tool to aid clion s indexing
  1071. Cleaning up after cookies
  1072. Climbing mount everest black byte bytes back
  1073. Cloud security presentation
  1074. Cisco snmp enumeration
  1075. Cisco asa series part two static analysis datamining of cisco asa firmware
  1076. Cisco ipsec vpn implementation group name enumeration
  1077. Cisco vpn client privilege escalation
  1078. Cisco asa series part six cisco asa mempools
  1079. Cisco asa series part three debugging cisco asa firmware
  1080. Cisco asa series part four dlmalloc 28x libdlmalloc dlmalloc on cisco asa
  1081. Cisco asa series part one intro to the cisco asa
  1082. Cisco asa series part seven checkheaps
  1083. Cisco asa series part eight exploiting the cve 2016 1287 heap overflow over ikev1
  1084. Cisco asa series part five libptmalloc gdb plugin
  1085. Check out our new microcorruption challenges
  1086. Choosing the right mcu for your embedded device desired security features of microcontrollers
  1087. Chrome password manager cross origin weakness
  1088. Certportal building self service secure smime provisioning portal
  1089. Chafer backdoor analysis
  1090. Celebrating ncc con europe 2018
  1091. Call map a tool for navigating call graphs in python
  1092. Cecster
  1093. Bypassing oracle dbms assert in certain situations
  1094. Bypassing software update package encryption extracting the lexmark mc3224i printer firmware part 1
  1095. C language standards update zero size reallocations are undefined behavior
  1096. Business insights cyber security in the financial sector
  1097. Bypassing android s network security configuration
  1098. Building wimap the wi fi mapping drone
  1099. Building intuition for lattice based signatures part 1 trapdoor signatures
  1100. Building intuition for lattice based signatures part 2 fiat shamir with aborts
  1101. Building security in software penetration testing
  1102. Building an rdp credential catcher for threat intelligence
  1103. Browser extension password managers
  1104. Buffer underruns dep aslr and improving the exploitation prevention mechanisms xpms on the windows platform
  1105. Build your own wi fi mapping drone capability
  1106. Broadcasting your attack dab security
  1107. Breaking into security research at ncc group
  1108. Breaking pedersen hashes in practice
  1109. Blind return oriented programming
  1110. Blind security testing an evolutionary approach
  1111. Blackbox ios app assessments using idb
  1112. Whitepaper a tour of curve 25519 in erlang
  1113. Blackhat asia usb physical access
  1114. Blackberry playbook security part one
  1115. Blackberry playbook security part two blackberry bridge
  1116. Black hat usa 2015 presentation broadcasting your attack dab security
  1117. Blackberry link webdav server bound to the blackberry vpn adapter
  1118. Black hat 2013 cryptopocalypse presentation available
  1119. Black hat 2013 femtocell presentation slides videos and app
  1120. Black hat europe 2013 andy davis to dock or not to dock
  1121. Black hat 2013 bluetooth smart presentation available
  1122. Best practices for the use of static code analysis within a real world secure development lifecycle
  1123. Best practices with byod
  1124. Beyond data loss prevention
  1125. Bat a fast and small key encapsulation mechanism
  1126. Batten down the hatches cyber threats facing dp operations
  1127. Berserko kerberos authentication for burp suite
  1128. Azucar
  1129. Back office web administration authentication bypass
  1130. Aws environment security assessment with scout2
  1131. Aws inventory a tool for mapping aws resources
  1132. Automating extraction from malware and recent campaign analysis
  1133. Autorepeater automated http request repeating with burp suite
  1134. Automated enumeration of email filtering solutions
  1135. Automated reverse engineering of relationships between data structures in cplusplus binaries
  1136. Auditing enterprise class applications and secure containers on android
  1137. Aurora response recommendations
  1138. Authorisation
  1139. Attacking the windows kernel black hat las vegas 2007
  1140. Attacking web service security message oriented madness xml worms and web service security sanity
  1141. Attacks on ssl
  1142. Assuring your ddos defences
  1143. Athoc toolbar
  1144. Assessing the security and privacy of vaccine passports
  1145. Assessing unikernel security
  1146. Xcavator
  1147. Assethook
  1148. Aspnet security and the importance of kb2698981 in cloud environments
  1149. Aspnet security and the importance of kb2698981 in cloud environments threat brief
  1150. Assessing iis configuration remotely
  1151. Are you oversharing in salesforce our new tool could sniff it out
  1152. Ase 1251 datatype overflow
  1153. Approximately 2000 citrix netscalers backdoored in mass exploitation campaign
  1154. Apt15 is alive and strong an analysis of royalcli and royaldns
  1155. Archived technical advisories
  1156. Apple quicktime player m4a processing buffer overflow
  1157. Blackhat usa 2024 listen up sonos over the air remote kernel exploitation and covert wiretap
  1158. The dark side how threat actors leverage anydesk for malicious activities
  1159. Application layer attacks the new ddos battleground
  1160. Apple coreanimation heap overflow
  1161. Apple mac os x imageio tiff integer overflow
  1162. Apple osxiphone ios imageio tiff getbandproctiff tilewidth heap overflow
  1163. Anti brute force resource metering
  1164. Apache struts vulnerability
  1165. On almost signing android builds
  1166. Announcing ncc group s cryptopals guided tour
  1167. Announcing the aws blog post series
  1168. Android opendebug
  1169. Android ssl trustkiller
  1170. Announcing ncc group s cryptopals guided tour set 2
  1171. Android ssl bypass
  1172. Android killpermandsigchecks
  1173. Android cloud backuprestore
  1174. Android malware vultur expands its wingspan
  1175. Analysis of the linux backdoor used in freenode irc network compromise
  1176. Analysing a recent poison ivy sample
  1177. Analysis of boomerang differential trials via a sat based constraint solver ursa
  1178. Analysis of setting cookies for third party websites in different browsers
  1179. An introduction to quantum computing for security professionals
  1180. An introduction to ultrasound security research
  1181. An offensive guide to the authorization code grant
  1182. An introduction to fault injection part 13
  1183. An introduction to heap overflows on aix 53l
  1184. An analysis of mobile geofencing app security
  1185. An illustrated guide to elliptic curve cryptography validation
  1186. An adaptive ciphertext attack against i c block cipher modes with an oracle
  1187. An adventure in contingency debugging ruby ioreadiowrite considered harmful
  1188. An adventure in poekmon neutrigo land
  1189. Advisory craigsblackie cve 2016 9795
  1190. Alternative approaches for fault injection countermeasures part 33
  1191. Adventures in xen exploitation
  1192. Adversarial machine learning approaches defences
  1193. Advice for security decision makers contemplating the value of antivirus
  1194. Advanced sql injection in sql server applications
  1195. Streamlining global automotive cybersecurity governance to accelerate innovation assurance and compliance
  1196. Where you inject matters the role specific impact of prompt injection attacks on openai models
  1197. Adventures in windows driver development part 1
  1198. Advanced exploitation of oracle plsql flaws
  1199. Abusing privileged and unprivileged linux containers
  1200. Chainspotting 2 the unofficial sequel to the 2018 talk chainspotting offensivecon 2025
  1201. Samsung galaxy s24 pwn2own ireland 2024
  1202. Accessing private fields outside of classes in java
  1203. Adobe acrobat reader xml forms data format buffer overflow
  1204. Abstract shimmer cve 2020 15257 host networking is root equivalent again
  1205. A survey of istio s network security features
  1206. A primer on slowable encoders
  1207. Public report meta whatsapp message summarization service
  1208. A race to report a toctou analysis of a bug collision in intel smm
  1209. A jq255 elliptic curve specification and a retrospective
  1210. A look at some real world obfuscation techniques
  1211. A guide to improving security through infrastructure as code
  1212. A brief look at windows telemetry cit aka customer interaction tracker
  1213. 5g security how to minimise the threats to a 5g network
  1214. Adventures in em side channel attacks
  1215. Bridging the valley of death
  1216. Public report google private ai compute review
  1217. Public report aws eks security claims
  1218. Mcp bridge upgrade
  1219. Euro 7 anti tampering and the expanding cybersecurity landscape
  1220. Black hole of trust seo poisoning in silver fox s space odyssey
  1221. Annual cyber security research report 2025
  1222. Cybersecurity and operational resiliency challenges in agriculture
  1223. The cartographers advantage human judgment in an ai security world
  1224. Scaling the mesh best practices for securing digimesh environments
  1225. Vulnerability analysis of cve 2026 21236
  1226. So you now have crypto planning for third party security assurance and penetration tests as an oem or supplier
  1227. Asyncing feeling when your download comes with something extra
  1228. Dissecting android malware post 1 mamont banking trojan
  1229. The silent dependency dc power regulation in cyber physical security
  1230. Public report object first
  1231. The expedition debrief how to structure human judgment in ai augmented pentests
  1232. In plain sight resilience challenges in the cloud
  1233. Teaching the mapmakers how ai training data shapes and distorts security coverage
  1234. So what even is threat modelling a security practitioners guide
  1235. Postcards from berlin offensivecon 2026
  1236. Tool release ghidra mediatek modem image loader
  1237. Async picos and custom beacon wakeups in cobalt strike
  1238. Postcards from hardweario
  1239. Bls boneh lynn shacham signatures implementation review
  1240. The symmetry problem why ai attackers and ai defenders share the same blind spots
  1241. An introduction to ai coding agent security
  1242. Auto pentester llm research
  1243. Dissecting android malware post 2 mamont variant advanced dropper logic and encrypted payload
  1244. Time as an attack surface
  1245. Public report tidb security assessment
  1246. What the 13 looks like a case study
  1247. Interpretable adversarial attacks in superposition
  1248. Assurance of co operative intelligent transportation systems
  1249. Privacy and security challenges of content provenance and authenticity systems
  1250. Public report go xcryptossh cryptographic implementation review
  1251. Postcards from las vegas blackhat usa 2026 and defcon 34
  1252. Vulnerability analysis of cve 2025 22226
  1253. Gone in 60 frames usb video exploitation def con 34
  1254. Exploiting usb on a tesla ivi with raspberry pi devices to bypass kaslr insomnihack 2026
  1255. Wpa3 denial of service sae resource exhaustion
  1256. Assurance is not compliance
  1257. Research articles
  1258. 10 real world stories of how we ve compromised cicd pipelines 1
  1259. Deep dive into quantum insert
  1260. Post mortem report on the sinowalnunl incident
  1261. Security advisory unencrypted storage of confidential information in keeper password data vault v53 for ios
  1262. Not quite the average exploit kit zuponcic
  1263. The state of ransomware in 2015
  1264. Building bowser a password cracking story
  1265. Cryptolocker variant torrentlocker making new victims in nl
  1266. Seen in the wild updated exploit kits
  1267. Presentatie fox it op infosecurity nl 2011
  1268. Large botnet cause of recent tor network overload
  1269. Analysis of malicious advertisements on telegraafnl
  1270. Dns takeover redirects thousands of websites to malware
  1271. Tilonspyeye2 intelligence report
  1272. Large malvertising campaign targeting the netherlands
  1273. Cryptophp analysis of a hidden threat inside popular content management systems
  1274. Malicious advertisements served via yahoo
  1275. Openssl heartbleed bug live blog
  1276. How to become cyber resilient quickly and remain in full control
  1277. Do you have a clue
  1278. Finding the hidden attacker in your network
  1279. How a research project at fox it enhances your security career
  1280. Ponmocup a giant hiding in the shadows
  1281. Rsa 2016 security heeft nog een lange weg te gaan
  1282. Rsa 2016 a long road ahead for security
  1283. Financial crisis exercise at rsa 2016
  1284. Cryptolocker ransomware intelligence report
  1285. Malvertising not all java from javacom is legitimate
  1286. Update on decryptcryptolocker
  1287. Website of security certification provider spreading ransomware
  1288. Large malvertising campaign hits popular dutch websites
  1289. Ransomware deployments after brute force rdp attack
  1290. Torrentlocker variant active in the netherlands
  1291. Linkedin information used to spread banking malware in the netherlands
  1292. Analysis of the kins malware
  1293. Writeup on nbccom distributing citadel malware
  1294. Demystifying pobelka
  1295. Mime sniffing feature or vulnerability
  1296. Rsa 512 certificates abused in the wild
  1297. Live blog on sslv3 protocol vulnerability poodle
  1298. Geinfecteerde advertenties op nunl
  1299. Oracle getting serious about java
  1300. Cyber security in nederland op de agenda
  1301. Fox it discovers security bugs in oracle software
  1302. Mogen we terugslaan
  1303. Observations on the recent java 0 day exploits in the wild
  1304. Cryptophp a week later more than 23000 sites affected
  1305. Xdoccryptdorifel document encrypting and network spreading virus
  1306. How to find malicious communication leaving your network
  1307. Critical analysis of microsoft operation b71
  1308. Onze visie op de eigen slagkracht van de overheid
  1309. Mitm6 compromising ipv4 networks via ipv6
  1310. Snake coming soon in mac os x flavour
  1311. Flubot the evolution of a notorious android banking malware original
  1312. Over het cda en het bestraffen van gebruik van crypto
  1313. Compromising citrix sharefile on premise via 7 chained vulnerabilities
  1314. Escalating privileges with acls in active directory
  1315. Introducing orchestrator decryption tool
  1316. Introducing team foundation server decryption tool
  1317. Bokbot the rebirth of a banker
  1318. Mofang a politically motivated information stealing adversary
  1319. Ziggo ransomware phishing campaign still increasing in size
  1320. Recent vulnerability in eir d1000 router used to spread updated version of mirai ddos bot
  1321. Detecting ticketbleed cve 2016 9244
  1322. Turkish hacktivists targeting the netherlands high noise low impact
  1323. A mole exposing itself to sunlight
  1324. Further abusing the badpwdcount attribute
  1325. Detection and recovery of nsas covered up tracks
  1326. Phishing ask and ye shall receive
  1327. Your trust our signature
  1328. Decrypting full disk encryption with dissect
  1329. Liveblog malvertising from google advertisements via possibly compromised reseller
  1330. Update on the torrentlocker ransomware
  1331. Identifying cobalt strike team servers in the wild
  1332. Psixbot the evolution of a modular net bot
  1333. Relaying credentials everywhere with ntlmrelayx
  1334. Massive outbreak of ransomware variant infects large amounts of computers around the world
  1335. Liveblog huge petya ransomware wave
  1336. Faq about petya goldeneye petr outbreak
  1337. Mkyara writing yara rules for the lazy analyst
  1338. Getting in the zone dumping active directory dns using adidnsdump
  1339. Export corrupts windows event log files
  1340. Syncing yourself to global administrator in azure active directory
  1341. Using anomaly detection to find malicious domains
  1342. Office 365 prone to security breaches
  1343. Detecting random filenames using unsupervised machine learning
  1344. Foxit debunks report on bylock app that landed 75000 people in jail in turkey
  1345. Hunting for beacons
  1346. Criminals in a festive mood
  1347. Lessons learned from a man in the middle attack
  1348. A second look at cve 2019 19781 citrix netscaler adc
  1349. Dpi laten we het doen zoals in chili
  1350. Forbes bert hubert explains the dns issue with china
  1351. One year since log4shell lessons learned for the next code red
  1352. Red teaming in the age of edr evasion of endpoint detection through malware virtualisation
  1353. From backup to backdoor exploitation of cve 2022 36537 in r1soft server backup manager
  1354. Cve 2022 27510 cve 2022 27518 measuring citrix adc gateway version adoption on the internet
  1355. Im in your hypervisor collecting your evidence
  1356. Three lazarus rats coming for your cheese