The Curious Engineer

All blogs / Security

Cyber Security Research

nccgroup.com/research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

SecurityWindows internalsReverse engineering

’10’15’20’25
Posts
1,395 from 5 Jan 2010 to 21 Oct 2026
Posting
monthly (11 in the last year)
Kind
company blog

2026 10

  1. When Picos Attack – USB Exploit Engineering
  2. The Quantum Countdown - Chapter 1: The Letters in the Warehouse
  3. Technical Advisory: Microsoft Windows – Windows MIDI Services (USBMIDI2.sys) – CVE-2026-69508
  4. Technical Advisory: Microsoft Windows – usbmidi2.sys MIDI-1.0 wMaxPacketSize pool overflow
  5. Technical Advisory: Microsoft Windows – uaspstor.sys – Device Controlled Kernel Pool OOB Write Via REPORT LUNS (CVE-2026-68839)
  6. Technical Advisory: Microsoft Windows – MIDI Service Module Escalation of Privileges (CVE-2026-62688)
  7. How Hard Is It Really to Break an AI Agent Out of Its Sandbox?
  8. Finding Two Authorization Bypasses in etcd through a Vulnerability Research LLM-Assisted Pipeline
  9. Mining Data from Cobalt Strike Beacons, Part 2: Releasing the Full Corpus
  10. A String Theorist's Guide to Implementing MIKE

2025 30

  1. Fake CAPTCHA Attack Leads to Lumma Malware
  2. Blockchain Key Security: Approvals & Policies
  3. Azure Fabric Backdoor With A Twist
  4. State of the Art of Private Key Security in Blockchain Ops - 3. Private Key Storage and Signing Module
  5. The Symbols of Operation
  6. State of the Art of Private Key Security in Blockchain Ops - 2. Common Custody Solutions Architectures
  7. Legacy Technology in Transport: More Than “Old Tech”
  8. Public Report: VetKeys Cryptography Review
  9. Unmasking Techno Sophists
  10. Goal-Based Regulation
  11. State of the Art of Private Key Security in Blockchain Ops - 1. Concepts, Types of Wallets and Signing Strategies
  12. Your point of departure for forensic readiness
  13. Voice Impersonation and DeepFake Vishing in Realtime
  14. VMware Workstation Guest-to-Host Escape Exploit Development
  15. Technical Advisory: Tesla Telematics Control Unit - ADB Auth Bypass
  16. When AI Guardrails Aren't Enough | Black Hat USA 2025
  17. A Look at RTEMS Security
  18. Autonomous AI Agents: A hidden Risk in Insecure smolagents “CodeAgent” Usage
  19. Masquerade: You Downloaded ScreenConnect not Grok AI!
  20. Quantum Data Centre of the Future
  21. OCP S.A.F.E. Framework Implementation Guide
  22. EAP-TLS: Secure Authentication Explained
  23. Pen Test, Red Team, or Bug Bounty?
  24. Operational Technology: An Engineer’s View
  25. Bybit Hack: In-Depth Technical Analysis
  26. Technical Advisory: Condeon CMS
  27. Technical Advisory: Multiple Vulnerabilities in TCPDF
  28. NCC Group’s 2024 Annual Research Report | NCC Group
  29. Proxying PyRIT for Security Testing
  30. Technical Advisory – Hash Denial-of-Service Attack in Multiple QUIC Implementations

2024 5

  1. PMKID Attacks and the 802.11r Myth
  2. RomHack's Journey to Pwn2Own Automotive 2024 | NCC Group
  3. Forensic Readiness in Container Environments | NCC Group
  4. Announcing the Cryptopals Guided Tour Video 17: Padding Oracles!
  5. Analyzing AI Application Threat Models

2023 1

  1. Research | A Brief Review of Bitcoin Locking Scripts and Ordinals

2022 8

  1. A glimpse into the shadowy realm of a Chinese APT: detailed analysis of a ShadowPad intrusion
  2. Whitepaper – Project Triforce: Run AFL On Everything (2017)
  3. Writing FreeBSD Kernel Modules in Rust | NCC Group
  4. Whitepaper – Practical Attacks on Machine Learning Systems | NCC Group
  5. A deeper dive into CVE-2021-39137 – a Golang security bug that Rust would have prevented | NCC Group
  6. Adventures in the land of BumbleBee – a new malicious loader | NCC Group
  7. Analyzing a PJL directory traversal vulnerability – exploiting the Lexmark MC3224i printer (part 2) | NCC Group
  8. 10 real-world stories of how we’ve compromised CI/CD pipelines

2021 2

  1. A Census of Deployed Pulse Connect Secure (PCS) Versions
  2. Wubes: Leveraging the Windows 10 Sandbox for Arbitrary Processes | NCC Group

2020 5

  1. Whitepaper – Exploring the Security of KaiOS Mobile Applications | NCC Group
  2. Whitepaper – Microcontroller Readback Protection: Bypasses and Defenses
  3. ESP32 BluFi Vulnerabilities Enable Code Execution
  4. Analyzing Secure AI Architectures
  5. Cryptopals Guided Tour Video 18

2019 2

  1. Cracking MIFARE Classic 1K RFID
  2. Xendbg: A Full-Featured Debugger for the Xen Hypervisor

2018 7

  1. YoNTMA | NCC Group
  2. Wsmap
  3. WSSiP: A Websocket Manipulation Proxy
  4. WSBang | NCC Group
  5. Autochrome
  6. WindowsJobLock
  7. Cross-Site Scripting in Umbraco CMS

2017 1

  1. A WarCon 2017 Presentation: Cisco ASA – Exploiting the IKEv1 Heap Overflow – CVE-2016-1287

2016 8

  1. Game from 44CON 2013
  2. Absolute Security: Rory McCunes’ presentation
  3. A Peek Behind the Great Firewall of Russia
  4. Avoiding Pitfalls Developing with Electron | NCC Group
  5. Writing Exploits for Win32 Systems from Scratch | NCC Group
  6. An Introduction to Authenticated Encryption | NCC Group
  7. 44CON Workshop – How to assess and secure iOS apps
  8. A few notes on usefully exploiting libstagefright on Android 5.x | NCC Group

2015 16

  1. Windows USB RNDIS driver kernel pool overflow
  2. Windows remote desktop memory corruptoin leading to RCE on XPSP3
  3. Xen Stack Memory Revelation Research
  4. Windows Remote Desktop Memory Corruption Leading to RCE on XPSP3
  5. Adobe Flash Player Cross Domain Policy Bypass
  6. Adobe flash sandbox bypass to navigate to local drives | NCC Group
  7. Writing Small Shellcode | NCC Group
  8. Writing Secure ASP Scripts | NCC Group
  9. Bit51 Better Security WP Security Plugin – Unauthenticated Stored XSS to RCE | NCC Group
  10. A Simple and Practical Approach to Input Validation | NCC Group
  11. A Back-to-Front TrueCrypt Recovery Story: The Plaintext is the Ciphertext
  12. Xen SMEP & SMAP Bypass Technique Analysis
  13. Work daily with enforced MFA-protected API access | NCC Group
  14. Abusing Blu-ray Players Part 1 – Sandbox Escapes | NCC Group
  15. Windows Firewall Hook Enumeration
  16. Whitepaper: CA Alternative | NCC Group

2014 3

  1. Whitepaper: Perfect Forward Security | NCC Group
  2. A New Flying Kitten?
  3. Writing Robust YARA Rules for Heartbleed

2013 1

  1. Working with the Open Technology Fund

2010 2

  1. Digest Authentication vs. Session Cookies
  2. HTTP Digest Integrity Revisited

Undated 1294

  1. Rapid Breach: Social Engineering to Remote Access in 300 Seconds | NCC Group
  2. Public Report - Google Confidential Space Security Assessment | NCC Group
  3. HTTP to MCP Bridge | NCC Group
  4. Public Report - VeChainThor Galactica Security Assessment | NCC Group
  5. 5 MCP Security Tips | NCC Group
  6. Insomnihack - Pioneering Zero Days at Pwn2Own Automotive 2024
  7. VeChain JavaScript SDK Cryptography and Security Review
  8. A Rendezvous with System Management Interrupts | NCC Group
  9. Security Tips For Your AI Cloud Infrastructure
  10. Weak Passwords Led to (SafePay) Ransomware
  11. Public Report: XMTP MLS Implementation Review
  12. Phish Supper: An Incident Responder’s Bread and Butter | NCC Group
  13. Analyzing Secure AI Design Principles
  14. Defending Your Directory: An Expert Guide to Mitigating Pass-the-Hash Attacks in Active Directory
  15. Defending Your Directory: An Expert Guide to Fortifying Active Directory Against LDAP Injection Threats
  16. Public Report: eBPF Verifier Code Review | NCC Group
  17. Defending Your Directory: An Expert Guide to Fortifying Active Directory Certificate Services (ADCS) Against Exploitation
  18. Nameless and shameless: Ransomware Encryption via BitLocker
  19. Defending Your Directory: An Expert Guide to Securing Active Directory Against DCSync Attacks | NCC Group
  20. Expert guide: combating Kerberoasting in AD
  21. Treat your points as cash
  22. Auditing K3s Clusters
  23. Public Report: WhatsApp Contacts Security Assessment | NCC Group
  24. Comparing AI Against Traditional Static Analysis Tools to Highlight Buffer Overflows | NCC Group
  25. 44con charging ahead exploiting an ev charger controller at pwn2own automotive 2024
  26. Technical advisory xiaomi 13 pro code execution via getapps dom cross site scripting xss
  27. Applying normalised compression distance for architecture classification
  28. Public report security risks of ai hardware for personal and edge computing devices
  29. Zulu
  30. Zcash cryptography and code review
  31. Zcash overwinter consensus and sapling cryptography review
  32. Zigtools an open source 802154 framework
  33. Windows ipc fuzzing tools
  34. Windows phone 7 application security survey
  35. Windows dacl enum project
  36. Back in black unlocking a lockbit 30 ransomware attack
  37. Windows dacls why there is still room for interest
  38. Why iot security matters
  39. Windows 10 usb mass storage driver arbitrary code execution in kernel mode
  40. Windows 2000 format string vulnerabilities
  41. Whitepaper recognizing and preventing toctou
  42. Why ai will not fully replace humans for web penetration testing
  43. Whitepaper xml schema dtd and entity attacks a compendium of known techniques
  44. Whitepaper hardware backed heist extracting ecdsa keys from qualcomm s trustzone
  45. Whitepaper coinbugs enumerating common blockchain implementation level vulnerabilities
  46. Whitepaper a heap of trouble breaking the linux kernel slob allocator
  47. Bleboy
  48. Blind exploitation of stack overflow vulnerabilities
  49. White paper login service security
  50. Whitebox
  51. Whitepaper double fetch vulnerabilities in c and cplusplus
  52. White paper browser extension password managers
  53. Blue coat bcaaa remote code execution vulnerability
  54. White paper cryptopocalypse reference paper
  55. When security gets in the way pentesting mobile apps that use certificate pinning
  56. Which database is more secure oracle vs microsoft
  57. White paper an introduction to authenticated encryption
  58. Brokenprint a netgear stack overflow
  59. Wheel of fortune outcome prediction taking the luck out of gambling 1
  60. When a trusted site in internet explorer was anything but
  61. What the hec security implications of hdmi ethernet channel and other related protocols
  62. Whatsupgold premium directory traversal
  63. Wheel of fortune outcome prediction taking the luck out of gambling
  64. Websense content filter bypass when deployed in conjunction with cisco filtering devices
  65. Welcome to the new ncc group global research blog
  66. Webinar smack skip tls freak ssltls vulnerabilities
  67. Building systems from commercial components
  68. Weblogic plugin http injection via encoded urls
  69. Webrats
  70. Webinar pci version 30 are you ready
  71. Webinar 4 secrets to a robust incident response plan
  72. Weak randomness part i linear congruential random number generators
  73. Weaknesses and best practices of public key kerberos with smart cards
  74. Vulnerabilities found in geofencing apps
  75. Vulnerability overview ghost cve 2015 0235
  76. Wastedlocker a new ransomware variant developed by the evil corp group
  77. Car parking apps vulnerable to hacks
  78. Vlan hopping
  79. Voip security methodology and results
  80. Violating the virtual channel rdp testing
  81. Cert c secure coding standard
  82. Cert oracle secure coding standard for java
  83. Virtual access monitor multiple sql injection vulnerabilities
  84. Visualising firewall rulesets simplifying firewall administration and spotting the pivot point
  85. Vehicle emissions and cyber security
  86. Violating database enforced security mechanisms
  87. Using sharepoint as a phishing platform
  88. Vaccine misinformation part 1 misinformation attacks as a cyber kill chain
  89. Variations in exploit methods between linux and windows
  90. Using graph databases to assess the security of thingernets based on the thingabilities and thingertivity of things
  91. Using semgrep with jupyter notebook files
  92. Username enumeration techniques and their value
  93. Using aws and azure for cost effective log ingestion with data processing pipelines for siems
  94. Use and enforce multi factor authentication
  95. Use of deserialisation in net framework methods and classes
  96. Usb keyboards by post use of embedded keystroke injectors to bypass autorun restrictions on modern desktop operating systems
  97. Usb under the bonnet implications of usb security vulnerabilities in vehicle systems
  98. Usb undermining security barriersfurther adventures with usb
  99. Updated technical advisory and proofs of concept multiple vulnerabilities in u boot cve 2022 30790 cve 2022 30552
  100. Usb attacks need physical access right not any more
  101. Unveiling the dark side a deep dive into active ransomware families
  102. Understanding the insider threat how to mitigate it
  103. Understanding the root cause of f5 networks k52145254 tmui rce vulnerability cve 2020 5902
  104. Unmasking lorenz ransomware a dive into recent tactics techniques and procedures
  105. Understanding ransomware impact evolution and defensive strategies
  106. Understanding the impact of ransomware on patient outcomes do we know enough
  107. Understanding microsoft word ole exploit primitives
  108. Understanding microsoft word ole exploit primitives exploiting cve 2015 1642 microsoft office ctasksymbol use after free vulnerability
  109. Understanding ransomware
  110. Understanding and hardening linux containers
  111. Understanding cyber risk management vs uncertainty with confidence in 2017
  112. Umap
  113. Unauthenticated xml external entity xxe vulnerability
  114. Typofinder
  115. U plug we play
  116. Uk government cyber security guidelines for connected autonomous vehicles
  117. Turla png dropper is back
  118. Tybocer
  119. Trust in the new internet survey
  120. Trusted gateway
  121. Trust in the internet survey
  122. Tpm genie
  123. Tpm genie interposer attacks against the trusted platform module serial bus
  124. Top of the pops three common ransomware entry techniques
  125. Tor browser research report released
  126. Toxic tokens using uuids for authorization is dangerous even if they re cryptographically random
  127. Tool wstalker an easy proxy to support web api assessments
  128. Tool release you ll never ever take me alive
  129. Tool update ruby trace a low level tracer for ruby
  130. Tool release sslyze v08 released
  131. Tool release tcpprox
  132. Tool release yontma
  133. Tool release ssl pinning bypass and other android tools
  134. Tool release sslyze v 09 released heartbleed edition
  135. Tool release sinking u boots with depthcharge
  136. Tool release peachfarmer
  137. Tool release redirecting traffic with dnsredirpy
  138. Tool release ios secure state preservation
  139. Tool release ios ssl kill switch v05 released
  140. Tool release introducing opinel scout2 s favorite tool
  141. Tool release dibf tool suite
  142. Tool release exploring ssl pinning on ios
  143. Tool release code credential scanner ccs
  144. Tool release code query cq
  145. Tool release blackbox ios app analysis with introspy
  146. Tool release calculating sql permissions
  147. Cross execute your linux binaries don t cross compile them
  148. Tool release cartographer
  149. Tool release blackbox android app analysis with introspy
  150. Cryptopals exploiting cbc padding oracles
  151. Tool release web3 decoder burp suite extension
  152. Tool release a simple dll injection utility
  153. Tool release announcing the release of rtspfuzzer
  154. Tool release scoutsuite 590
  155. Tool release socks over rdp now works with citrix
  156. Tool release scoutsuite 5110
  157. Cve 2018 8611 exploiting windows ktm part 25 patch analysis and basic triggering
  158. Tool release scoutsuite 5130
  159. Tool release jwt reauth
  160. Tool release reliably checked string library binding
  161. Tool release scoutsuite 510
  162. Tool release solitude a privacy analysis tool
  163. Tool release winstrument an instrumentation framework for windows application assessments
  164. Cve 2021 31956 exploiting the windows kernel ntfs with wnf part 2
  165. Tool release socks over rdp
  166. Tool release scoutsuite 580
  167. Tool release shouganaiyo loader a tool to force jvm attaches
  168. Tool release project kubescout adding kubernetes support to scout suite
  169. Tool release scoutsuite 5120
  170. Tool release monkey365
  171. Tool release principal mapper v110 update
  172. Tool release ghostrings
  173. Tool release httpsignatures a burp suite extension implementing http signatures
  174. Dangers of kubernetes iam integrations
  175. Tool release icpin an integrity check and anti debug detection pintool
  176. Tool release collaboratorplusplus
  177. To dock or not to dock that is the question using laptop docking stations as hardware based attack platforms
  178. Toner deaf printing your next persistence hexacon 2022
  179. Tool windows executable memory page delta reporter
  180. Tis the season to be
  181. Tlspretense ssltls client testing framework
  182. Threats and vulnerabilities within the maritime and shipping sectors
  183. Deception engineering exploring the use of windows service canaries against ransomware
  184. Time trial racing towards practical remote timing attacks
  185. Threat profiling microsoft sql server
  186. Decoder improved burp suite plugin release part two
  187. Threat spotlight hydra
  188. Threat intelligence benefits for the enterprise
  189. Threat modelling cloud platform services by example google cloud storage
  190. Thin clients slim security
  191. Third party assurance
  192. Defeating windows dep with a custom rop chain
  193. There s another hole in your soc unisoc rom vulnerabilities
  194. They ought to know better exploiting security gateways via their web interfaces
  195. The why behind web application penetration test prerequisites
  196. There s a hole in your soc glitching the mediatek bootrom
  197. The spelling police searching for malicious http servers by identifying typos in http responses
  198. The ssl conservatory
  199. Denial of service in parsing a url by ierutildll
  200. The update framework tuf security assessment
  201. Detecting and hunting for the petitpotam ntlm relay attack
  202. The sorry state of aftermarket head unit security
  203. Detecting and protecting when remote desktop protocol rdp is open to the internet
  204. The phishing guide understanding preventing phishing attacks
  205. The role of security research in improving cyber security
  206. The password is dead long live the password
  207. The pentesters guide to akamai
  208. The pharming guide understanding and preventing dns related attacks by phishers
  209. Detecting mimikatz with busylight
  210. The paillier cryptosystem with applications to threshold ecdsa
  211. The next c language standard c23
  212. The myth of twelve more bytes security on the post scarcity internet
  213. The importance of a cryptographic review
  214. Disabling office macros to reduce malware infections
  215. The l4m3ne55 of passw0rds notes from the field
  216. The future of c code review
  217. The extended aws security ramp up guide
  218. The factoring dead preparing for the cryptopocalypse
  219. The facts about badusb
  220. The economics of defensive security
  221. The disadvantages of a blacklist based approach to input validation
  222. The death of usb autorun and the rise of the usb keyboard
  223. The demise of signature based antivirus
  224. The cis security standard for docker available now
  225. The challenges of fuzzing 5g protocols
  226. The case of missing file extensions
  227. The abcs of nfc chip security
  228. The automotive threat modeling template
  229. Testing infrastructure as code using dynamic tooling
  230. Testing two factor authentication
  231. The 9 lives of bleichenbacher s cat new cache attacks on tls implementations
  232. Technical advisory unauthenticated sql injection in lansweeper
  233. Testing http2 only web services
  234. Ebpf adventures fiddling with the linux kernel and unix domain sockets
  235. Technical advisory sonos era 100 secure boot bypass through unchecked setenv call
  236. Technical advisory sql injection and reflected cross site scripting xss vulnerabilities in oracle communications diameter signaling router cve 2020 14787 cve 2020 14788
  237. Technical advisory stored and reflected xss vulnerability in nagios log server cve 2021 35478 cve 2021 35479
  238. Technical advisory shell injection in sourcetree
  239. Technical advisory ruby on rails possible xss vulnerability in actionview tag helpers cve 2022 27777
  240. Technical advisory shell injection in macvim mvim uri handler
  241. Technical advisory reflected cross site scripting xss vulnerability in jenkins delivery pipeline plugin
  242. Technical advisory remote shell commands execution in ttyd
  243. Technical advisory pulse connect secure rce via uncontrolled gzip extraction cve 2020 8260
  244. Technical advisory pulse connect secure arbitrary file read via logon message cve 2020 8255
  245. Technical advisory pulse connect secure rce via uncontrolled archive extraction cve 2021 22937 patch bypass
  246. Technical advisory os command injection in silver peak edgeconnect appliances cve 2020 12148 cve 2020 12149
  247. Technical advisory nexpose hard coded java key store passphrase allows decryption of stored credentials
  248. Technical advisory multiple vulnerabilities in manageengine desktop central
  249. Technical advisory multiple vulnerabilities in lexmark printers
  250. Technical advisory multiple vulnerabilities in mailenable
  251. Exploiting ms15 061 use after free windows kernel vulnerability
  252. Technical advisory multiple vulnerabilities in hp printers
  253. Technical advisory mosquitto broker dos through a memory leak vulnerability
  254. Technical advisory multiple vulnerabilities in accellion file transfer appliance
  255. Technical advisory intel driver support assistance local privilege escalation
  256. Technical advisory heartbleed chained with a pass the hash attack leads to device compromise on tp link c200 ip camera
  257. Technical advisory insufficient proxyman helpertool xpc validation
  258. Technical advisory dell supportassist local privilege escalation cve 2021 21518
  259. Technical advisory cve 2017 8592 xmlhttprequest in ie followed 307 redirections with additional or customised headers
  260. Technical advisory citrix workspace receiver remote code execution vulnerability
  261. Technical advisory bypassing microsoft xoml workflows protection mechanisms using deserialisation of untrusted data
  262. Technical advisory authentication bypass in libssh
  263. Technical advisory authentication rule bypass
  264. Technical advisory adobe coldfusion rmi registrybind deserialisation rce
  265. Technical advisory adobe coldfusion object deserialisation rce
  266. Technical advisory rohnp key extraction side channel in multiple crypto libraries
  267. Technical advisory administrative passcode recovery and authenticated remote buffer overflow vulnerabilities in gigaset dx600a handset cve 2021 25309 cve 2021 25306
  268. Finding and exploiting net remoting over http using deserialisation
  269. Technical advisory sonicwall sma 100 series unauthenticated file upload path traversal cve 2021 20040
  270. Technical advisory gaining root access on sumpple s610 ip camera via telnet and unprotected client and server data transmission between android and ios clients
  271. Technical advisory sonicwall sma 100 series unauthenticated arbitrary file deletion
  272. Technical advisory sercomm h500s authenticated remote command execution cve 2021 44080
  273. Technical advisory sonicwall global management system gms analytics multiple critical vulnerabilities
  274. Technical advisory null pointer derefence in mcafee drive encryption cve 2021 23893
  275. Flash local with filesystem bypass in navigatetourl
  276. Technical advisory ollama dns rebinding attack cve 2024 28224
  277. Freddy an extension for automatically identifying deserialisation issues in java and net applications
  278. Technical advisory multiple vulnerabilities in nagios xi
  279. Technical advisory multiple vulnerabilities in juplink rx4 1800 wifi router cve 2022 37413 cve 2022 37414
  280. Technical advisory linksys wrt160nl authenticated remote buffer overflow cve 2020 26561
  281. Technical advisory multiple vulnerabilities in faronics insight cve 2023 28344 cve 2023 28345 cve 2023 28346 cve 2023 28347 cve 2023 28348 cve 2023 28349 cve 2023 28350 cve 2023 28351 cve 2023 28352 cve 2023 28353
  282. Technical advisory linksys wrt160nl authenticated command injection cve 2021 25310
  283. Technical advisory jitsi meet electron limited certificate validation bypass cve 2020 27161
  284. Technical advisory ictfax 7 4 indirect object reference
  285. Technical advisory jitsi meet electron arbitrary client remote code execution cve 2020 27162
  286. Technical advisory wolfssl tls 13 client man in the middle attack cve 2020 24613
  287. Technical advisory apple macos xar arbitrary file write cve 2022 22582
  288. Technical advisory vmware tools multiple vulnerabilities
  289. Technical advisory tesla ble phone as a key passive entry vulnerable to relay attacks
  290. Technical advisory u boot unchecked download size and direction in usb dfu cve 2022 2347
  291. Technical advisory sonicwall sma 100 series unauthenticated stored xss
  292. Technical advisory sunhillo sureline unauthenticated os command injection cve 2021 36380
  293. Technical advisory sonicwall sma 100 series multiple unauthenticated heap based and stack based buffer overflow cve 2021 20045
  294. Technical advisory sonicwall sma 100 series post authentication remote command execution cve 2021 20044
  295. Technical advisory sonicwall sma 100 series heap based buffer overflow cve 2021 20043
  296. Technical advisory pulse connect secure rce via template injection cve 2020 8243
  297. Technical advisory shop app sends pasteboard data to shopify s servers
  298. Technical advisory play pac4j authentication rule bypass
  299. Technical advisory playsms pre authentication remote code execution cve 2020 8644
  300. Technical advisory parceltrack sends all pasteboard data to parceltrack s servers on startup
  301. Technical advisory openofficeorg multiple memory corruption vulnerabilities
  302. Technical advisory nxp imx sdp read disable fuse bypass cve 2022 45163
  303. Technical advisory open5gs stack buffer overflow during pfcp session establishment on upf cve 2021 41794
  304. Technical advisory nullsoft scriptable installer system nsis insecure temporary directory usage
  305. Technical advisory new york state excelsior pass vaccine passport credential forgery
  306. Technical advisory new york state excelsior pass vaccine passport scanner app sends data to a third party not specified in privacy policy
  307. Technical advisory multiple vulnerabilities in u boot cve 2022 30790 cve 2022 30552
  308. Technical advisory multiple vulnerabilities in nuki smart locks cve 2022 32509 cve 2022 32504 cve 2022 32502 cve 2022 32507 cve 2022 32503 cve 2022 32510 cve 2022 32506 cve 2022 32508 cve 2022 32505
  309. Technical advisory macos installer local root privilege escalation cve 2020 9817
  310. Technical advisory libraptor xxe in rdfxml file interpretation
  311. Technical advisory linux rds protocol local privilege escalation
  312. Technical advisory kwiktag web admin authentication bypass
  313. Technical advisory lenovo imcontroller local privilege escalation cve 2021 3922 cve 2021 3969
  314. Hitbams your not so home office soho hacking at pwn2own
  315. Technical advisory kwiksetweiser ble proximity authentication in kevo smart locks vulnerable to relay attacks
  316. Technical advisory ibm tam remote directory traversal and file retrieval via web server plug in
  317. Technical advisory ibm websphere commerce encrypted url parameter vulnerable to padding oracle attacks
  318. How i did not get a shell
  319. Technical advisory garuda linux insecure user creation cve 2021 3784
  320. Technical advisory htc iqrd android permission leakage
  321. Technical advisory freepbx multiple authenticated sql injections in ucp application
  322. Technical advisory fujitsu centricstor control center v81 unauthenticated command injection cve 2022 31794 and cve 2022 31795
  323. How organisations can properly configure ssl services to ensure the integrity and confidentiality of data in transit
  324. Technical advisory expresslrs vulnerabilities allow for hijack of control link
  325. Technical advisory coda filesystem kernel memory disclosure
  326. Technical advisory deltek vision arbitrary sql execution sqli
  327. Technical advisory bomgar remote support local privilege escalation
  328. Technical advisory citrix access gateway command injection vulnerability
  329. Technical advisory authorization bypass allows for pinboard corruption
  330. Technical advisory ble proximity authentication vulnerable to relay attacks
  331. Technical advisory authenticated sql injection in soap request in broadcom ca network flow analysis cve 2021 44050
  332. Technical advisory arbitrary signature forgery in stark bank ecdsa libraries cve 2021 43572 cve 2021 43570 cve 2021 43569 cve 2021 43568 cve 2021 43571
  333. Technical advisory arm mbedos usb mass storage driver memory corruption
  334. Technical advisory apple xar arbitrary file write cve 2021 30833
  335. Technical advisory arbitrary file read in dell wyse management suite cve 2021 21586 cve 2021 21587
  336. Technical advisory apple hfsplus information disclosure vulnerability
  337. Technical advisory apple ios osx foundation nsxmlparser xxe vulnerability
  338. Tcpprox
  339. Tandberg video communication server static ssh host keysn
  340. Ig learner walkthrough
  341. Tattler
  342. Immortalising 20 years of epic research
  343. Tandberg video communication server arbitrary file retrieval
  344. Tandberg video communication server authentication bypass
  345. Ta505 a brief history of their time
  346. Tales of windows detection opportunities for an implant framework
  347. Ta505 exploits solarwinds serv u vulnerability cve 2021 35211 for initial access
  348. Sysinternals sdelete when secure delete fails
  349. Syspwn vr for pwn2own
  350. Sysaid helpdesk pro blind sql injection
  351. Improving software security through c language standards
  352. Sysaid helpdesk stored xss
  353. Symantec pc anywhere remote code extecution
  354. Sysaid helpdesk blind sql injection
  355. Symantec messaging gateway ssh with backdoor user account plus privilege escalation to root due to very old kernel
  356. Symantec messaging gateway easy csrf to add a backdoor administrator for example
  357. Symantec messaging gateway out of band stored xss delivered by email
  358. Symantec messaging gateway unauthorised ssh access
  359. Symantec messaging gateway arbitrary file download is possible with a crafted url authenticated
  360. Symantec messaging gateway out of band stored xss via email
  361. Symantec messaging gateway unauthenticated detailed version disclosure
  362. Symantec messaging gateway addition of a backdoor adminstrator via csrf
  363. Symantec messaging gateway authenticated arbritary file download
  364. Symantec message filter session hijacking via session
  365. Symantec message filter unauthenticated verbose software version information disclosure
  366. Symantec backup exec 2012 backuprestore data traverses memory with weak acls
  367. Symantec backup exec 2012 os version and service pack information leak
  368. Symantec backup exec 2012 persistent xss vulnerability affecting custom reports
  369. Symantec backup exec 2012 backup exec utility stored xss when adding groups servers and computers
  370. Symantec backup exec 2012 linux backup agent heap overflow
  371. Supply chain security begins with secure software development
  372. Streamdivert relaying specific network connections
  373. Striking back at retired cobalt strike a look at a legacy vulnerability
  374. Stopping automated attack tools
  375. Story of a hundred vulnerable jenkins plugins
  376. Stepping insyde system management mode
  377. Ios 7 tool updates
  378. Ios application security the definitive guide for hackers and developers
  379. Stepping stones a red team activity hub
  380. State of the art email risk
  381. Sslyze v08
  382. State of dns rebinding in 2023
  383. Ssl checklist for pentesters
  384. Sslyze v07 released
  385. Squiz cms file path traversal
  386. Spy pi do you trust your laptop docking stations
  387. Spectre on a television
  388. Isec completes truecrypt audit
  389. Spectre and meltdown what you need to know
  390. Some notes about the xen xsa 122 bug
  391. Solaris 11 usb hubclass
  392. Isec reviews securedrop
  393. Some musings on common ebpf linux tracing bugs
  394. Solaris 11 usb hub class descriptor kernel stack overflow
  395. Software based fault injection countermeasures part 23
  396. Software verification and analysis using z3
  397. Software security austerity security debt in modern software development
  398. Social engineering
  399. Java coding guidelines 75 recommendations for reliable and secure programs
  400. Sobelow static analysis for the phoenix framework
  401. Soc maturity capability
  402. Sobelow update
  403. Jenkins plugins and core technical summary advisory
  404. So long and thanks for all the 0day
  405. Smuggling hta files in internet exploreredge
  406. Sniffle a sniffer for bluetooth 5
  407. Smb hash hijacking user tracking in ms outlook
  408. Smart contracts inside sgx enclaves common security bug patterns
  409. Slotting security into corporate development
  410. Smack skip tls freak ssltls vulnerabilities
  411. Sign over your hashes stealing netntlm hashes via outlook signatures
  412. Signaturing an authenticode anomaly with yara
  413. Singularity of origin
  414. Siam ag23 algebraic geometry with friends
  415. Lights camera hacked an insight into the world of popular ip cameras
  416. Shocker
  417. Local network compromise despite good patching
  418. Shellshock bash vulnerability
  419. Shining new light on an old rom vulnerability secure boot bypass via dcd and csf tampering on nxp imx devices
  420. Sharkbot a new generation android banking trojan being distributed on google play store
  421. Shell arithmetic expansion and evaluation abuse
  422. Shellshock advisory
  423. Shaking the foundation of an online collaboration tool microsoft 365 top 5 attacks vs the cis microsoft 365 foundation benchmark
  424. Sharkbot is back in google play
  425. Setting a new standard for kubernetes deployments
  426. Machine learning 101 the integrity of image mis classification
  427. Settlers of netlink exploiting a limited uaf in nf tables cve 2022 32250
  428. Security of things an implementer s guide to cyber security for internet of things devices and beyond
  429. Security of things an implementers guide to cyber security for internet of things devices and beyond
  430. Security first umbrella
  431. Security code review with chatgpt
  432. Mallory and me setting up a mobile mallory gateway
  433. Security compliance as an engineering discipline
  434. Security considerations of zk snark parameter multi party computation
  435. Securing the continuous integration process
  436. Security best practice host naming url conventions
  437. Securing google cloud platform ten best practices
  438. Securing plsql applications with dbms assert
  439. Securing teradata database
  440. Securecisco
  441. Matty mcmattface security implications mitigations testing strategies for biometric facial recognition systems
  442. Securecookies
  443. Secureieactivex
  444. Secure session management with cookies for web applications
  445. Securebigip
  446. Secure device manufacturing supply chain security resilience
  447. Secure device provisioning best practices heavy truck edition
  448. Secure messaging for normal people
  449. Second order code injection attacks
  450. Secure application development on facebook
  451. Scenester
  452. Scenester a small tool for cross platform web application
  453. Scomplicated decrypting scom runas credentials
  454. Saml pummel
  455. Saml xml injection
  456. Samba netr serverpasswordset expoitability analysis
  457. Samba andx request remote code execution
  458. Meshyjson a tp link tdpserver json stack overflow
  459. Samba on the blackberry playbook
  460. Sakula an adventure in dll planting
  461. Metastealer filling the racoon void
  462. Salesforce security with remote working
  463. Ruxcon 2013 introspy presentation slides
  464. Rtspfuzzer
  465. Ruling the rules
  466. Mitigating the top 10 security threats to gcp using the cis google cloud platform foundation benchmark
  467. Rust for security and correctness in the embedded world
  468. Rokrat analysis
  469. Rsa conference mobile threat war room
  470. Modelling threat actor phishing behaviour
  471. Rise of the sensors securing lorawan networks
  472. Modernizing legacy systems software technologies engineering processes and business practices
  473. Rm3 curiosities of the wildest banking malware
  474. Rigging the vote uniqueness in verifiable random functions
  475. Rise of the machines machine learning its cyber security applications
  476. Rift detection capabilities for recent f5 big ipbig iq icontrol rest api vulnerabilities cve 2021 22986
  477. Rift f5 cve 2020 5902 and citrix cve 2020 8193 cve 2020 8195 and cve 2020 8196 honeypot data release
  478. Rift f5 networks k52145254 tmui rce vulnerability cve 2020 5902 intelligence
  479. Ricochet security assessment public report
  480. Rift analysing a lazarus shellcode execution method
  481. Multiple security vulnerabilities in sap netweaver bsp logon
  482. Rift citrix adc vulnerabilities cve 2020 8193 cve 2020 8195 and cve 2020 8196 intelligence
  483. Multiple vulnerabilities in mailenable
  484. Reverse reveal recover windows defender quarantine forensics
  485. Reviewing verifiable random functions
  486. Reverse engineering coin hunt world s binary protocol
  487. Return of the hidden number problem
  488. Revealing embedded fingerprints deriving intelligence from usb stack interactions
  489. Revealing embedded fingerprints deriving intelligence from usb stack interactions 2013
  490. Research report zephyr and mcuboot security assessment
  491. Retro gaming vulnerability research warcraft 2
  492. Research insights volume 9 modern security vulnerability discovery
  493. Research paper machine learning for static malware analysis with university college london
  494. Research paper recovering deleted data from the windows registry
  495. Ncc group connected health whitepaper july 2019
  496. Research insights volume 7 exploitation advancements
  497. Research insights volume 8 hardware design fpga security risks
  498. Research insights volume 4 sector focus maritime sector
  499. Research insights volume 5 sector focus automotive
  500. Research insights volume 6 common issues with environment breakouts
  501. Research insights volume 1 sector focus financial services
  502. Research insights volume 2 defensive trends
  503. Research insights volume 3 how are we breaking in mobile security
  504. Remote exploitation of microsoft office dll hijacking ms15 132 via browsers
  505. Replicating cves with klee
  506. Remote code execution in impresspages cms
  507. Remote code execution on western digital pr4100 nas cve 2022 23121
  508. Remote directory traversal and file retrieval
  509. Ncc group s exploit development capability why and what
  510. Ncloader
  511. Real world cryptography conference 2021 a virtual experience
  512. Real world cryptography conference 2022
  513. Real world cryptography conference 2023 part i
  514. Netgear routers a playground for hackers
  515. Readable thrift
  516. Readable thrift 1
  517. Ragweed
  518. Nine years of bugs at ncc group
  519. Ransomware how vulnerable is your system
  520. Ransomware what organisations can do to survive
  521. Python class informer an idapython plugin for viewing run time type information rtti
  522. Quantum cryptography a study into present technologies and future applications
  523. Pysimreader
  524. Pumping iron on the musl heap real world cve 2022 24834 exploitation on an alpine mallocng heap
  525. Public report aleo snarkos implementation and consensus mechanism review
  526. North korea s lazarus their initial access trade craft using social media and social engineering
  527. Puckungfu a netgear wan command injection
  528. Offensivecon 2023 exploit engineering attacking the linux kernel
  529. Public report aws nitro system api security claims italian
  530. Public report aws nitro system api security claims spanish
  531. Public report aws nitro system api security claims
  532. Public report aws nitro system api security claims french
  533. Public report aws nitro system api security claims german
  534. Public report zcash frost security assessment
  535. Online casino roulette a guideline for penetration testers and security researchers
  536. Public report aleo snarkvm implementation review
  537. Public report zendoo proof verifier cryptography review
  538. Public report entropyrust cryptography review
  539. Public report solana program library zk token security assessment
  540. Public report whatsapp opaque ke cryptographic implementation review
  541. Public report zcash nu5 cryptography review
  542. Public report zcash zebra security assessment
  543. Public report vpn by google one technical security privacy assessment
  544. Public report whatsapp auditable key directory akd implementation review
  545. Public report whatsapp end to end encrypted backups security assessment
  546. Public report threshold ecdsa cryptography review
  547. Public report vpn by google one security assessment
  548. Public report qredo apache milagro mpc cryptographic assessment
  549. Public report rustcrypto aesgcm and chacha20pluspoly1305 implementation review
  550. Public report security review of rsa blind signatures with public metadata
  551. Public report pixel 44xl and pixel 4a ioxt audit
  552. Public report protocol labs groth16 proof aggregation cryptography and implementation review
  553. Public report o 1 labs mina client sdk signature library and base components cryptography and implementation review
  554. Public report penumbra labs decaf377 implementation and poseidon parameter selection review
  555. Public report penumbra labs r1cs implementation review
  556. Public report kubernetes 124 security audit
  557. Public report lantern and replica security assessment
  558. Public report matrix olm cryptographic review
  559. Public report iov labs powhsm security assessment
  560. Public report keyfork implementation review
  561. Public report go cose security assessment
  562. Public report google enterprise api security assessment
  563. Public report google privacy sandbox aggregation service and coordinator
  564. Public report dell secured component verification
  565. Public report electric coin company nu4 cryptographic specification and implementation review
  566. Public report confidential mode for hyperdisk dek protection analysis
  567. Public report confidential space security review
  568. Public report android cloud backuprestore
  569. Public report blst cryptographic implementation review
  570. Public report caliptra security assessment
  571. Public report coda cryptographic review
  572. Past present and future of effective c
  573. Public report filecoin bellman and bls signatures cryptographic review
  574. Proxy re encryption protocol ironcore public report
  575. Prtg network monitor command injection
  576. Public cloud
  577. Protecting stored cardholder data an unofficial supplement to pci dss v30
  578. Project triforce run afl on everything
  579. Properly signed certificates on cpe devices
  580. Project ava on the matter of using machine learning for web application security testing part 9 adventures with expert systems
  581. Pip3line the swiss army knife of byte manipulation
  582. Project bishop clustering web pages
  583. Popping blisters for research an overview of past payloads and exploring recent developments
  584. Project ava on the matter of using machine learning for web application security testing part 4 architecture and design
  585. Private sector cyber resilience and the role of data diodes
  586. Potential false redirection of web site content in internet in sap netweaver web applications
  587. Practical considerations of right to repair legislation
  588. Preparing for cyber battleships electronic chart display and information system security
  589. Principal mapper pmapper
  590. Premium practical law content gateway
  591. Premium practical law content gateway 2
  592. Premium security content gateway
  593. Practical machine learning for random filename detection
  594. Practical sme security on a shoestring
  595. Premium content gateway
  596. Professional c programming livelessons video training part i writing robust secure reliable code
  597. Project ava on the matter of using machine learning for web application security testing part 1 understanding the basics and what platforms and frameworks are available
  598. Project ava on the matter of using machine learning for web application security testing part 10 efficacy demonstration project conclusion and next steps
  599. Porting the misfortune cookie exploit a look into router exploitation using the td 8817
  600. Post exploiting a compromised etcd full control over the cluster and its nodes
  601. Project ava on the matter of using machine learning for web application security testing part 2 going off on a tangent aiml applications in social engineering
  602. Project ava on the matter of using machine learning for web application security testing part 3 understanding existing approaches and attempts
  603. Post quantum cryptography overview
  604. Port scan automation
  605. Project ava on the matter of using machine learning for web application security testing part 5 development of prototype 1 text processing and semantic relationships
  606. Project ava on the matter of using machine learning for web application security testing part 6 development of prototype 2 creating a sqli poc
  607. Poc2021 pwning the windows 10 kernel with ntfs and wnf slides
  608. Pointer sequence reverser psr
  609. Project ava on the matter of using machine learning for web application security testing part 7 development of prototype 3 adventures in anomaly detection
  610. Project ava on the matter of using machine learning for web application security testing part 8 development of prototype 4 building on takaesu s approach with focus on xss
  611. Poison ivy string decryption
  612. Phishing stories
  613. Pip3line
  614. Phantap phantom tap making networks spookier one packet at a time
  615. Phishing mitigations configuring microsoft exchange to clearly identify external emails
  616. Peeling back the layers on defence in depth knowing your onions
  617. Proxmon
  618. Perfect forward security
  619. Payment card industry data security standard pci dss a navigation and explanation of changes from v20 to v30
  620. Pdf form filling and flattening tool buffer overflow
  621. Peachfarmer
  622. Passive information gathering the analysis of leaked network security information
  623. Password and brute force mitigation policies
  624. Paradoxical compression with verifiable delay functions
  625. Passive decryption of ethereum peer to peer traffic
  626. Pairing over bls12 381 part 2 curves
  627. Pairing over bls12 381 part 3 pairing
  628. Paper thematic for success in real world offensive cyber operations how to make threat actors work harder and fail more often
  629. Package play
  630. Public report electric coin company nu3 specification and blossom implementation audit
  631. Padding the struct how a compiler optimization can disclose stack memory
  632. Pairing over bls12 381 part 1 fields
  633. Overview of modern memory security concerns
  634. Owning the virgin media hub 30 the perfect place for a backdoor
  635. Os x lion usb hub class descriptor arbitrary code execution
  636. Osquery application security assessment public report
  637. Osx afpserver remote code execution
  638. Oracle retail invoice manager sql injection
  639. Order details screens and pii
  640. Os x 1066 camera raw library memory corruption
  641. Oracle passwords and orabrute
  642. Oracle retail integration bus manager directory traversal
  643. Oracle gridengine sgepasswd buffer overflow
  644. Oracle hyperion 11 directory traversal
  645. Oracle java installer adds a system path which is writable by all
  646. Oracle forensics part 5 finding evidence of data theft in the absence of auditing
  647. Oracle forensics part 6 examining undo segments flashback and the oracle recycle bin
  648. Oracle forensics part 7 using the oracle system change number in forensic investigations
  649. Oracle forensics part 3 isolating evidence of attacks against the authentication mechanism
  650. Oracle forensics part 4 live response
  651. Oracle e business suite pre auth sqli with dba privileges
  652. Oracle forensics part 1 dissecting the redo logs
  653. Oracle forensics part 2 locating dropped objects
  654. Oracle 11g tns listener remote invalid pointer read
  655. Oracle 11g tns listener remote null pointer dereference
  656. Optimizing pairing based cryptography montgomery arithmetic in rust
  657. Optimizing pairing based cryptography montgomery multiplication in assembly
  658. Optimum routers researching managed routers
  659. Open banking security considerations potential risks
  660. On multiplications with unsaturated limbs
  661. On the malicious use of large language models like gpt 3
  662. On the use of pedersen commitments for confidential payments
  663. Nx server for linux arbitrary files can be read with root privileges
  664. On linux s random number generation
  665. Puckungfu 2 another netgear wan command injection
  666. Nsa cisa kubernetes security guidance a critical review
  667. Non floodnon volumetric distributed denial of service ddos
  668. Non stack based exploitation of buffer overrun vulnerabilities on windows nt 2000 xp
  669. Nist selects post quantum algorithms for standardization
  670. Non obvious pe parsers the net runtime part 1
  671. Non deterministic nature of prompt injection
  672. New sources of microsoft office metadata tool release metadataplus
  673. Network attached security attacking a synology nas
  674. New attack vectors and a vulnerability dissection of ms03 007
  675. Nerve
  676. Nessus authenticated scan local privilege escalation
  677. Real world cryptography conference 2023 part ii
  678. Real world cryptography conference 2024
  679. Ncccodenavi
  680. Ncc group s 2021 annual research report
  681. Ncc group s 2022 2023 research report
  682. Ncc group s jeremy boone recognized for highest quality and most eligible reports through the intel circuit breaker program
  683. Ncc group s juan garrido named to microsoft s msrc office security researcher leaderboard
  684. Ncc group s upcoming trainings at black hat usa 2021
  685. Ncc group whitepaperunderstanding and hardeninglinux containersjune 29 2016 version 11
  686. Ncc group s 2020 annual research report
  687. Ncc group research at black hat usa 2021 and def con 29
  688. Ncc group research at black hat usa 2022 and def con 30
  689. Ncc group researchers named amongst msrc s most valuable security researchers in 2020
  690. Ncc group malware technical note
  691. Ncc group placed first in global 5g cyber security hack competition
  692. Ncc con europe 2022 pwn2own austin presentations
  693. Ncc group co signs the electronic frontier foundation s statement on dmca use against security researchers
  694. Nagios xi network monitor stored and reflected xss
  695. Ncc con europe 2016
  696. Ncc con europe 2017
  697. Nagios xi network monitor stored and reflective xss
  698. Nagios xi network monitor blind sql injection
  699. My hash is my passport understanding web and mobile authentication
  700. Reverse engineering and decrypting cyberark vault credential files
  701. My name is matt my voice is my password
  702. Nagios xi network monitor os command injection
  703. Multiple shell metacharacter injections in afflib
  704. Multiple buffer overflows discovered in afflib
  705. Multiple cisco css ace client certificate and http header
  706. Multiple format string injections in afflib
  707. Mssql lateral movement
  708. Much ado about hardware implants
  709. More advanced sql injection
  710. Mobile web browser credential management security implications attack cases mitigations
  711. Mobile apps and security by design
  712. Mobile world congress mobile internet of things
  713. Microsoft s sql server vs oracle s rdbms
  714. Mining data from cobalt strike beacons
  715. Rustproofing linux part 14 leaking addresses
  716. Rustproofing linux part 24 race conditions
  717. Microsoft sql server passwords
  718. Rustproofing linux part 34 integer overflows
  719. Microsoft zero day vulnerability ole2link threat intelligence and signatures
  720. Rustproofing linux part 44 shared memory
  721. Microsoft announces the wmic command is being retired long live powershell
  722. Microsoft internet explorer cmarkup use after free
  723. Microsoft office memory corruption vulnerability
  724. Metasploitavevasion
  725. Memory scanning for the masses
  726. Mergers acquisitions ma cyber security due diligence
  727. Medium risk vulnerability in symantec network access control
  728. Memory gap
  729. Mcafee email and web security appliance v56 session hijacking and bypassing client side session timeouts
  730. Medical devices a hardware security perspective
  731. Medium risk vulnerability in symantec enterprise security management
  732. Mcafee email and web security appliance v56 any logged in user can bypass controls to reset passwords of other administrators
  733. Mcafee email and web security appliance v56 arbitrary file download is possible with a crafted url when logged in as any user
  734. Secure coding in c and cplusplus
  735. Secure coding in c and cplusplus 2nd edition
  736. Mcafee email and web security appliance v56 password hashes can be recovered from a system backup and easily cracked
  737. Mcafee email and web security appliance session hijacking and bypassing client side session timeouts
  738. Secure coding rules for java livelessons part 1
  739. Mcafee email and web security appliance v56 active session tokens of other users are disclosed within the ui
  740. Mcafee email and web security appliance arbitrary file download is possible with a crafted url when logged in as any user
  741. Mcafee email and web security appliance password hashes can be recovered from a system backup and easily cracked
  742. Mcafee email and web security appliance reflective xss allowing an attacker to gain session tokens
  743. Mature security testing framework
  744. Mcafee email and web security appliance active session tokens of other users are disclosed within the ui
  745. Mcafee email and web security appliance any logged in user can bypass controls to reset passwords of other administrators
  746. Maritime cyber security threats and opportunities
  747. Managing cyber risk in the supply chain
  748. Managing powershell in a modern corporate environment
  749. Manifest explorer
  750. Mallory transparent tcp and udp proxy
  751. Man in the middling non proxy aware wi fi devices with a pineapple
  752. Machine learning for static analysis of malware expansion of research scope
  753. Machine learning from idea to reality a powershell case study
  754. Making new connections leveraging cisco anyconnect client to drop and run payloads
  755. Machine learning 103 exploring llm code generation
  756. Machine learning 104 breaking aes with power side channels
  757. Lumension device control remote memory corruption
  758. Self driving cars the future is now
  759. Machine learning 102 attacking facial authentication with poisoned data
  760. Ltair the lte air interface tool
  761. Lumension device control formerly sanctuary remote memory corruption
  762. Login service security
  763. Logs logs the audit trail features of a successful log management solution
  764. Low cost attacks on smart cards the electromagnetic side channel
  765. Log4j jndi be gone a simple mitigation for cve 2021 44228
  766. Shining the light on black basta
  767. Log4shell reconnaissance and post exploitation network detection
  768. Shooting yourself in the flags jailbreaking the sonos era 100
  769. Live incident blog june global ransomware outbreak
  770. Lessons learned from 50 usb bugs
  771. Libavcodec amv out of array write
  772. Sifting through the spines identifying potential cactus ransomware victims
  773. Libtalloc a gdb plugin for analysing the talloc heap
  774. Lending a hand to the community covenant v07 updates
  775. Lessons learned from 50 bugs common usb driver vulnerabilities
  776. Launching the first in our series of research insights
  777. Ldapfragger bypassing network restrictions using ldap attributes
  778. Leapfrogging pfr implementations
  779. Lapsus recent techniques tactics and procedures
  780. Smartermail stored xss in emails
  781. Latest threats to the connected car intelligent transport ecosystem
  782. Kivlad
  783. Kubernetes security consider your threat model
  784. Snapmc skips ransomware steals data
  785. Lapith
  786. Kerberos resource based constrained delegation when an image change leads to a privilege escalation
  787. Java rmi registrybind unvalidated deserialization
  788. Java web start file inclusion via system properties override
  789. Jackson deserialization vulnerabilities
  790. Social engineering penetration testing
  791. Jailbreak
  792. Jailbreak updated and open sourced
  793. Ism rat
  794. Ivanti zero day threat actors observed leveraging cve 2021 42278 and cve 2021 42287 for quick privilege escalation to domain admin
  795. Isec s analysis of microsoft s sdl and its roi
  796. Isec engages in truecrypt audit
  797. Isec partners releases sslyze
  798. Ip reputation snort rule generator
  799. Is this the real life is this just fantasy caught in a landslide noescape from ncc group
  800. Sql server security
  801. Isec audit of mediawiki
  802. Ios ssl killswitch
  803. Ios user enrollment and trusted certificates
  804. Ios certificate pinning code updated for ios 7
  805. Ios instrumentation without jailbreak
  806. Ios mobileslideshow usb image class arbitrary code executiontxt
  807. Investigating potential security vulnerability manifestation through various analyses inferences regarding internet rfcs and how rfc security might be improved
  808. Iodide
  809. Ios 7 arbitrary code execution in kernel mode
  810. Introduction to aws attribute based access control
  811. Introspy for android
  812. Introducing chuckle and the importance of smb signing
  813. Introducing idb simplified blackbox ios app pentesting
  814. Introduction to anti fuzzing a defence in depth aid
  815. Internet of things security
  816. Introducing azucar
  817. Inter protocol communication
  818. Inter protocol exploitation
  819. Interfacesd to rce
  820. Intel software guard extensions sgx a researcher s primer
  821. Intent fuzzer
  822. Intent sniffer
  823. Integrity destroying malicious code for financial or geopolitical gain a vision of the future
  824. Intel bios advisory memory corruption in hid drivers
  825. Increased exploitation of oracle glassfish server administration console remote authentication bypass
  826. Incremental machine learning by example detecting suspicious activity with zeek data streams river and ja3 hashes
  827. Integrating digitalocean into scoutsuite
  828. Improving your network and application assurance strategy in an environment of increasing 0day vulnerabilities
  829. In depth analysis of the new team9 malware family
  830. Impress pages cms remote code execution
  831. Improving your embedded linux security posture with yocto
  832. Implementing and detecting a pci rootkit
  833. Implementing the castryck decru sidh key recovery attack in sagemath
  834. Immunity debugger buffer overflow
  835. Impact of dns over https doh on dns rebinding attacks
  836. Impersonating gamers with gpt 2
  837. Image io memory corruption
  838. Ietf draft indicators of compromise and their role in attack and defen c s e
  839. Iam user management strategy part 2
  840. Iax voice over ip security
  841. Icsot security the evolution of the purdue model integrating industrial and business networks
  842. Http profiler
  843. Hunting sql injection bugs
  844. Iam user management strategy
  845. How will gdpr impact your communications
  846. How to importing wstalker csv and more into burp suite via import to sitemap extension
  847. Html5 security the modern web browser perspective
  848. How to spot and prevent an eclipse attack
  849. How we breach network infrastructures and protect them
  850. How to backdoor diffie hellman
  851. How to protect yourself your organisation from phishing attacks
  852. How to spot a penetration tester in your network and catch the real bad guys at the same time
  853. How microsoft office knows a document came from the internet and might be dangerous
  854. How much training should staff have on cyber security
  855. How cryptography is used to monitor the spread of covid 19
  856. Hostresolver
  857. House
  858. Hidden cobra volgmer a technical analysis
  859. Hitb phuket 2023 exploiting the lexmark postscript stack
  860. Heartbleed openssl vulnerability
  861. Helping engineering teams tackle security debt in embedded systems u boot configuration auditing introduced in depthcharge v020
  862. Hiccupy
  863. Technical advisory multiple html injection vulnerabilities in kaios pre installed mobile applications
  864. Technical advisory multiple vulnerabilities in connectize g6 ac2100 dual band gigabit wifi router cve 2023 24046 cve 2023 24047 cve 2023 24048 cve 2023 24049 cve 2023 24050 cve 2023 24051 cve 2023 24052
  865. Hdmi hacking displays made interesting
  866. Hdmi ethernet channel
  867. Heartbleed cve 2014 0160 advisory
  868. Technical advisory multiple vulnerabilities in the galaxy app store cve 2023 21433 cve 2023 21434
  869. Hardware security by design esp32 guidance
  870. Harnessing gpus building better browser based botnets
  871. Hackproofing oracle application server
  872. Handy guide to a new fivehands ransomware variant
  873. Hardware embedded systems a little early effort in security can return a huge payoff
  874. Hacking the extensible firmware interface
  875. Hackproofing lotus domino web server
  876. Technical advisory openjdk weak parsing logic in javanetinetaddress and related classes
  877. Hackproofing mysql
  878. Hacking a web application
  879. Hacking appliances ironic exploits in security products
  880. Hacking displays made interesting
  881. Grepify a small tool for code reviewers
  882. Gsmgprs traffic interception for penetration testing engagements
  883. Gizmo
  884. Going auth the rails on a crazy train
  885. Grepify
  886. Getting shell with xamlx files
  887. Ghidra nanomips isa module
  888. Ghost vulnerability cve 2015 0235
  889. General data protection regulation knowing your data
  890. Getting per user conditional access mfa status in azure
  891. G scout
  892. Game security
  893. General data protection regulation are you ready
  894. Fuzzing the easy way using zulu 1
  895. Fuzzing usb devices using frisbee lite
  896. Fuzzbox
  897. Technical advisory lansweeper privilege escalation via csrf using http method interchange cve 2020 13658
  898. Fuzzing rtsp to discover an exploitable vulnerability in vlc
  899. Fuzzing the easy way using zulu
  900. From csv to cmd to qwerty
  901. From ermac to hook investigating the technical differences between two android malware variants
  902. Fpgas security through obscurity
  903. Technical advisory multiple vulnerabilities in netgear prosafe plus jgs516pe gs116ev2 switches
  904. Technical advisory multiple vulnerabilities in pandorafms enterprise
  905. Frisbeelite
  906. Flubot the evolution of a notorious android banking malware
  907. Technical advisory multiple vulnerabilities in trendnet tew 831dr wifi router cve 2022 30325 cve 2022 30326 cve 2022 30327 cve 2022 30328 cve 2022 30329
  908. Technical advisory multiple vulnerabilities in victure wr1200 wifi router cve 2021 43282 cve 2021 43283 cve 2021 43284
  909. Forensic fuzzing tools
  910. Fix bounty
  911. Flash security restrictions bypass file upload by urlrequest
  912. Firmware rootkits the threat to the enterprise
  913. Firstexecution
  914. Five essential machine learning security papers
  915. File fuzzers
  916. Finding the weak link in binaries
  917. Fat finger
  918. Faux disk encryption realities of secure storage on mobile devices
  919. Extracting the payload from a cve 2014 1761 rtf document
  920. Technical advisory adobe coldfusion wddx deserialization gadgets
  921. Extractor
  922. Faster modular inversion and legendre symbol and an x25519 speed record
  923. Extending a thinkst canary to become an interactive honeypot
  924. External enumeration and exploitation of email and web security solutions
  925. Technical advisory bypassing workflows protection mechanisms remote code execution on sharepoint
  926. Exploring verifiable random functions in code
  927. Exporting non exportable rsa keys
  928. Technical advisory code execution by unsafe resource handling in multiple microsoft products
  929. Technical advisory code execution by viewing resource files in net reflector
  930. Exposing vulnerabilities in media software
  931. Exploring prompt injection attacks
  932. Technical advisory command injection
  933. Technical advisory containerd containerd shim api exposed to host network containers cve 2020 15257
  934. Exploring the security privacy of canada s digital proof of vaccination programs
  935. Exploring macos calendar alerts part 1 attempting to execute code
  936. Exploring macos calendar alerts part 2 exfiltrating data cve 2020 3882
  937. Technical advisory cyberark epm non paged pool buffer overflow
  938. Exploring overfitting risks in large language models
  939. Exploiting the win32k xxxenablewndsbarrows use after free cve 2015 0057 bug on both 32 bit and 64 bit
  940. Exploring deepfake capabilities mitigation strategies with university college london
  941. Exploiting samba cve 2015 0240 on ubuntu 1204 and debian 7 32 bit
  942. Exploiting security gateways via web interfaces
  943. Technical advisory ip office stored cross site scripting xss vulnerability
  944. Technical advisory mitel mivoice 5330e memory corruption flaw
  945. Exploiting the sudo baron samedit vulnerability cve 2021 3156 on vmware vcenter server 70
  946. Exploiting plsql injection flaws with only create session privileges
  947. Exploiting rich content
  948. Exploiting cve 2015 2426 and how i ported it to a recent windows 81 64 bit
  949. Technical advisory multiple vulnerabilities in brother printers
  950. Technical advisory multiple vulnerabilities in kyocera printers
  951. Exploiting noisy oracles with bayesian inference
  952. Exploit the fuzz exploiting vulnerabilities in 5g core networks
  953. Exploiting cve 2014 0282
  954. Exploiting cve 2014 0282 1
  955. Experiments in extending thinkst canary part 1
  956. Technical advisory multiple vulnerabilities in ricoh printers
  957. Technical advisory multiple vulnerabilities in smartermail
  958. Exploit mitigations keeping up with evolving and complex softwarehardware
  959. Ethics in security testing
  960. Technical advisory multiple vulnerabilities in xerox printers
  961. Eurocrypt 2023 death of a kem
  962. Exception handling and data integrity in salesforce
  963. Estimating the bit security of pairing friendly curves
  964. Technical advisory pdftron javascript urls allowed in webviewer ui cve 2021 39307
  965. Eternalglue part one rebuilding notpetya to assess real world resilience
  966. Erlang security 101
  967. Enterprise scale seamless onboarding and deployment of azure sentinel using lighthouse for multi tenant environments
  968. Enumerating system management interrupts
  969. Encryption does not equal invisibility detecting anomalous tls certificates with the half space trees algorithm
  970. End of life pragmatism
  971. Endpoint connectivity
  972. Emissary panda a potential new malicious tool
  973. Encryption at rest not the panacea to data protection
  974. Technical advisory smb hash hijacking and user tracking in ms outlook
  975. Edidfuzzer
  976. Elephant in the boardroom survey 2016
  977. Embedded device security certifications
  978. Ebook breach notification under gdpr how to communicate a personal data breach
  979. Technical advisory unauthenticated remote command execution through multiple vulnerabilities in virgin media hub 30
  980. Easyda easy windows domain access script
  981. Ebook do you know how your organisation would react in a real world attack scenario
  982. Ebook planning a robust incident response process
  983. Earlyremoval in the conservatory with the wrench exploring ghidra s decompiler internals to make automatic p code analysis scripts
  984. Easyda
  985. Dynamic linq injection remote code execution vulnerability cve 2023 32571
  986. E mail spoofing and cdontsnewmail
  987. The browser hacker s handbook
  988. Early ccs attack analysis
  989. Drones detect identify intercept and hijack
  990. The cert c coding standard second edition 98 rules for developing safe reliable and secure systems
  991. Drupal vulnerability
  992. Dotnetpaddingoracle
  993. Dotnetpefuzzing
  994. The database hacker s handbook
  995. Double odd elliptic curves
  996. Domestic iot nightmares smart doorbells
  997. Don t throw a hissy fit defend against medusa
  998. The development of a telco attack testing tool
  999. Do not use your aws root account
  1000. Does typescript offer security improvements over javascript
  1001. Dissecting social engineering attacks
  1002. Distributed ledger blockchain security and quantum computing implications
  1003. Dns pinning and web proxies
  1004. Disclosure policy
  1005. Discovering smart contract vulnerabilities with goatcasino
  1006. Developing secure mobile applications for android
  1007. Dibf updated
  1008. The mobile application hacker s handbook
  1009. Detecting rclone an effective tool for exfiltration
  1010. Detection engineering for kubernetes clusters
  1011. Detecting dns implants old kitten new tricks a saitama case study
  1012. Detecting karakurt an extortion focused threat actor
  1013. Detecting anomalous vectored exception handlers on windows
  1014. The shellcoder s handbook discovering and exploiting security holes 2nd edition
  1015. Derusbi a case study in rapid capability development
  1016. Detecting and hunting for the malicious netfilter driver
  1017. Demystifying cobalt strike s make token command
  1018. Demystifying multivariate cryptography
  1019. Delux edition getting root privileges on the elux thin client os
  1020. Demystifying aws assumerole and stsexternalid
  1021. Deep dive into real world kubernetes threats
  1022. Defeating the stack based buffer overflow prevention mechanism of microsoft windows 2003 server
  1023. Decoding network data from a gh0st rat variant
  1024. Threat actors exploiting the pandemic
  1025. Decrypting openssh sessions for fun and profit
  1026. Dectbeacon
  1027. Decoder improved burp suite plugin release part one
  1028. Deception engineering exploring the use of windows installer packages against first stage payloads
  1029. Decoder improved burp suite plugin
  1030. Database security a christmas carol
  1031. Database servers on windows xp and the unintended consequences of simple file sharing
  1032. Ddos common approaches and failings
  1033. Data mining with sql injection and inference
  1034. Dataarmor full disk encryption 3012c restricted environment breakout privilege escalation and full disk decryption
  1035. Tool release carnivore microsoft external assessment tool
  1036. Database security brief the oracle critical patch update for april 2007
  1037. Dangling cursor snarfing a new class of attack in oracle
  1038. Tool release enumerating docker registries with go pillage registries
  1039. Darpa onstar vulnerability analysis
  1040. D0nut encrypt me i have a wife and no backups
  1041. Dancing offbit the story of a single character typo that broke a chacha based prng
  1042. Tool release insject a linux namespace injector
  1043. D link dir 850l web admin interface vulnerable to stack based buffer overflow
  1044. D link routers vulnerable to remote code execution rce
  1045. Cyber security in uk agriculture
  1046. Cyber security of new space paper
  1047. Cybervillainsca
  1048. Cyber essentials scheme
  1049. Cyber red teaming business critical systems while managing operational risk
  1050. Cve 2019 1405 and cve 2019 1322 elevation to system via the upnp device host service and the update orchestrator service
  1051. Cve 2021 31956 exploiting the windows kernel ntfs with wnf part 1
  1052. Cve 2018 8611 exploiting windows ktm part 45 from race win to kernel read and write primitive
  1053. Cve 2018 8611 exploiting windows ktm part 55 vulnerability detection and a better readwrite primitive
  1054. Cve 2018 8611 exploiting windows ktm part 15 introduction
  1055. Cve 2018 8611 exploiting windows ktm part 35 triggering the race condition and debugging tricks
  1056. Cve 2017 8570 rtf and the sisfader rat
  1057. Cve 2018 8611 diving into the windows kernel transaction manager ktm for fun and exploitation
  1058. Cups filters remote code execution
  1059. Curve9767 and fast signature verification
  1060. Critical risk vulnerability in sap message server heap overflow
  1061. Cross site request forgery an introduction to a common web application weakness
  1062. Critical risk vulnerability in ingres pointer overwrite 2
  1063. Critical risk vulnerability in sap db web server stack overflow
  1064. Creating arbitrary shellcode in unicode expanded strings
  1065. Creep web app scanner
  1066. Critical risk vulnerability in ingres pointer overwrite 1
  1067. Cranim a toolkit for cryptographic visualization
  1068. Crave the data statistics from 1 300 phishing campaigns
  1069. Creating a safer oauth user experience
  1070. Tool release magisk module conscrypt trust user certs
  1071. Cracking random number generators using machine learning part 1 xorshift128
  1072. Cracking random number generators using machine learning part 2 mersenne twister
  1073. Cracking rdp nla supplied credentials for threat intelligence
  1074. Conti nuation methods and techniques observed in operations post the leaks
  1075. Cowcloud
  1076. Constant time data processing at a secret offset privacy and quic
  1077. Content security policies and popular cms systems
  1078. Content security policies best practices
  1079. Conference talks march 2022
  1080. Conference talks november 2021
  1081. Conference talks october 2021
  1082. Conference talks septemberoctober 2022
  1083. Conference talks december 2021
  1084. Conference talks june 2021
  1085. Conference talks september 2020
  1086. Conference talks september 2021
  1087. Conference talks may 2021
  1088. Tracking a p2p network related to ta505
  1089. Conference talks november 2020
  1090. Conference talks october 2020
  1091. Conference talks june 2022
  1092. Conference talks march 2020
  1093. Conference talks february 2020
  1094. Conference talks februarymarch 2021
  1095. Conference talks january 2020
  1096. Compromising apache tomcat via jmx access
  1097. Conference talks august 2020
  1098. Conference talks december 2020
  1099. Common insecure practices with configuring and extending salesforce
  1100. Common security issues in financially oriented web applications
  1101. Compromising a hospital network for 118 plus postage packaging
  1102. Common flaws of distributed identity and authentication systems
  1103. Command injection in xml signatures and encryption
  1104. Code patterns for api authorization designing for security
  1105. Combating java deserialisation vulnerabilities with look ahead object input streams laois
  1106. Cloudwatch amazon web services shellshock
  1107. Cmakerer a small tool to aid clion s indexing
  1108. Cleaning up after cookies
  1109. Climbing mount everest black byte bytes back
  1110. Cloud security presentation
  1111. Cisco snmp enumeration
  1112. Cisco asa series part two static analysis datamining of cisco asa firmware
  1113. Cisco ipsec vpn implementation group name enumeration
  1114. Cisco vpn client privilege escalation
  1115. Cisco asa series part six cisco asa mempools
  1116. Cisco asa series part three debugging cisco asa firmware
  1117. Cisco asa series part four dlmalloc 28x libdlmalloc dlmalloc on cisco asa
  1118. Cisco asa series part one intro to the cisco asa
  1119. Cisco asa series part seven checkheaps
  1120. Cisco asa series part eight exploiting the cve 2016 1287 heap overflow over ikev1
  1121. Cisco asa series part five libptmalloc gdb plugin
  1122. Check out our new microcorruption challenges
  1123. Choosing the right mcu for your embedded device desired security features of microcontrollers
  1124. Chrome password manager cross origin weakness
  1125. Certportal building self service secure smime provisioning portal
  1126. Chafer backdoor analysis
  1127. Celebrating ncc con europe 2018
  1128. Call map a tool for navigating call graphs in python
  1129. Cecster
  1130. Bypassing oracle dbms assert in certain situations
  1131. Bypassing software update package encryption extracting the lexmark mc3224i printer firmware part 1
  1132. C language standards update zero size reallocations are undefined behavior
  1133. Business insights cyber security in the financial sector
  1134. Bypassing android s network security configuration
  1135. Building wimap the wi fi mapping drone
  1136. Building intuition for lattice based signatures part 1 trapdoor signatures
  1137. Building intuition for lattice based signatures part 2 fiat shamir with aborts
  1138. Building security in software penetration testing
  1139. Building an rdp credential catcher for threat intelligence
  1140. Browser extension password managers
  1141. Buffer underruns dep aslr and improving the exploitation prevention mechanisms xpms on the windows platform
  1142. Build your own wi fi mapping drone capability
  1143. Broadcasting your attack dab security
  1144. Breaking into security research at ncc group
  1145. Breaking pedersen hashes in practice
  1146. Blind return oriented programming
  1147. Blind security testing an evolutionary approach
  1148. Blackbox ios app assessments using idb
  1149. Whitepaper a tour of curve 25519 in erlang
  1150. Blackhat asia usb physical access
  1151. Blackberry playbook security part one
  1152. Blackberry playbook security part two blackberry bridge
  1153. Black hat usa 2015 presentation broadcasting your attack dab security
  1154. Blackberry link webdav server bound to the blackberry vpn adapter
  1155. Black hat 2013 cryptopocalypse presentation available
  1156. Black hat 2013 femtocell presentation slides videos and app
  1157. Black hat europe 2013 andy davis to dock or not to dock
  1158. Black hat 2013 bluetooth smart presentation available
  1159. Best practices for the use of static code analysis within a real world secure development lifecycle
  1160. Best practices with byod
  1161. Beyond data loss prevention
  1162. Bat a fast and small key encapsulation mechanism
  1163. Batten down the hatches cyber threats facing dp operations
  1164. Berserko kerberos authentication for burp suite
  1165. Azucar
  1166. Back office web administration authentication bypass
  1167. Aws environment security assessment with scout2
  1168. Aws inventory a tool for mapping aws resources
  1169. Automating extraction from malware and recent campaign analysis
  1170. Autorepeater automated http request repeating with burp suite
  1171. Automated enumeration of email filtering solutions
  1172. Automated reverse engineering of relationships between data structures in cplusplus binaries
  1173. Auditing enterprise class applications and secure containers on android
  1174. Aurora response recommendations
  1175. Authorisation
  1176. Attacking the windows kernel black hat las vegas 2007
  1177. Attacking web service security message oriented madness xml worms and web service security sanity
  1178. Attacks on ssl
  1179. Assuring your ddos defences
  1180. Athoc toolbar
  1181. Assessing the security and privacy of vaccine passports
  1182. Assessing unikernel security
  1183. Xcavator
  1184. Assethook
  1185. Aspnet security and the importance of kb2698981 in cloud environments
  1186. Aspnet security and the importance of kb2698981 in cloud environments threat brief
  1187. Assessing iis configuration remotely
  1188. Are you oversharing in salesforce our new tool could sniff it out
  1189. Ase 1251 datatype overflow
  1190. Approximately 2000 citrix netscalers backdoored in mass exploitation campaign
  1191. Apt15 is alive and strong an analysis of royalcli and royaldns
  1192. Archived technical advisories
  1193. Apple quicktime player m4a processing buffer overflow
  1194. Blackhat usa 2024 listen up sonos over the air remote kernel exploitation and covert wiretap
  1195. The dark side how threat actors leverage anydesk for malicious activities
  1196. Application layer attacks the new ddos battleground
  1197. Apple coreanimation heap overflow
  1198. Apple mac os x imageio tiff integer overflow
  1199. Apple osxiphone ios imageio tiff getbandproctiff tilewidth heap overflow
  1200. Anti brute force resource metering
  1201. Apache struts vulnerability
  1202. On almost signing android builds
  1203. Announcing ncc group s cryptopals guided tour
  1204. Announcing the aws blog post series
  1205. Android opendebug
  1206. Android ssl trustkiller
  1207. Announcing ncc group s cryptopals guided tour set 2
  1208. Android ssl bypass
  1209. Android killpermandsigchecks
  1210. Android cloud backuprestore
  1211. Android malware vultur expands its wingspan
  1212. Analysis of the linux backdoor used in freenode irc network compromise
  1213. Analysing a recent poison ivy sample
  1214. Analysis of boomerang differential trials via a sat based constraint solver ursa
  1215. Analysis of setting cookies for third party websites in different browsers
  1216. An introduction to quantum computing for security professionals
  1217. An introduction to ultrasound security research
  1218. An offensive guide to the authorization code grant
  1219. An introduction to fault injection part 13
  1220. An introduction to heap overflows on aix 53l
  1221. An analysis of mobile geofencing app security
  1222. An illustrated guide to elliptic curve cryptography validation
  1223. An adaptive ciphertext attack against i c block cipher modes with an oracle
  1224. An adventure in contingency debugging ruby ioreadiowrite considered harmful
  1225. An adventure in poekmon neutrigo land
  1226. Advisory craigsblackie cve 2016 9795
  1227. Alternative approaches for fault injection countermeasures part 33
  1228. Adventures in xen exploitation
  1229. Adversarial machine learning approaches defences
  1230. Advice for security decision makers contemplating the value of antivirus
  1231. Advanced sql injection in sql server applications
  1232. Streamlining global automotive cybersecurity governance to accelerate innovation assurance and compliance
  1233. Where you inject matters the role specific impact of prompt injection attacks on openai models
  1234. Adventures in windows driver development part 1
  1235. Advanced exploitation of oracle plsql flaws
  1236. Abusing privileged and unprivileged linux containers
  1237. Chainspotting 2 the unofficial sequel to the 2018 talk chainspotting offensivecon 2025
  1238. Samsung galaxy s24 pwn2own ireland 2024
  1239. Accessing private fields outside of classes in java
  1240. Adobe acrobat reader xml forms data format buffer overflow
  1241. Abstract shimmer cve 2020 15257 host networking is root equivalent again
  1242. A survey of istio s network security features
  1243. A primer on slowable encoders
  1244. Public report meta whatsapp message summarization service
  1245. A race to report a toctou analysis of a bug collision in intel smm
  1246. A jq255 elliptic curve specification and a retrospective
  1247. A look at some real world obfuscation techniques
  1248. A guide to improving security through infrastructure as code
  1249. A brief look at windows telemetry cit aka customer interaction tracker
  1250. 5g security how to minimise the threats to a 5g network
  1251. Adventures in em side channel attacks
  1252. Bridging the valley of death
  1253. Public report google private ai compute review
  1254. Public report aws eks security claims
  1255. Mcp bridge upgrade
  1256. Euro 7 anti tampering and the expanding cybersecurity landscape
  1257. Black hole of trust seo poisoning in silver fox s space odyssey
  1258. Annual cyber security research report 2025
  1259. Cybersecurity and operational resiliency challenges in agriculture
  1260. The cartographers advantage human judgment in an ai security world
  1261. Scaling the mesh best practices for securing digimesh environments
  1262. Vulnerability analysis of cve 2026 21236
  1263. So you now have crypto planning for third party security assurance and penetration tests as an oem or supplier
  1264. Asyncing feeling when your download comes with something extra
  1265. Dissecting android malware post 1 mamont banking trojan
  1266. The silent dependency dc power regulation in cyber physical security
  1267. Public report object first
  1268. The expedition debrief how to structure human judgment in ai augmented pentests
  1269. In plain sight resilience challenges in the cloud
  1270. Teaching the mapmakers how ai training data shapes and distorts security coverage
  1271. So what even is threat modelling a security practitioners guide
  1272. Postcards from berlin offensivecon 2026
  1273. Tool release ghidra mediatek modem image loader
  1274. Async picos and custom beacon wakeups in cobalt strike
  1275. Postcards from hardweario
  1276. Bls boneh lynn shacham signatures implementation review
  1277. The symmetry problem why ai attackers and ai defenders share the same blind spots
  1278. An introduction to ai coding agent security
  1279. Auto pentester llm research
  1280. Dissecting android malware post 2 mamont variant advanced dropper logic and encrypted payload
  1281. Time as an attack surface
  1282. Public report tidb security assessment
  1283. What the 13 looks like a case study
  1284. Interpretable adversarial attacks in superposition
  1285. Assurance of co operative intelligent transportation systems
  1286. Privacy and security challenges of content provenance and authenticity systems
  1287. Public report go xcryptossh cryptographic implementation review
  1288. Postcards from las vegas blackhat usa 2026 and defcon 34
  1289. Vulnerability analysis of cve 2025 22226
  1290. Gone in 60 frames usb video exploitation def con 34
  1291. Exploiting usb on a tesla ivi with raspberry pi devices to bypass kaslr insomnihack 2026
  1292. Wpa3 denial of service sae resource exhaustion
  1293. Assurance is not compliance
  1294. Research articles