Unified threat intelligence platform combining dark web monitoring, stealer log analysis, and attack surface recon.

There's no silver bullet, but if we put some "lead" bullets in the right
places, we have a good shot at keeping sensitive data out of logs.

a simple, no-frills, command-line driven
pastebin service powered by the Rocket web framework.

EDRChoker redteam tool uses Policy-based QoS - pacer.sys to set throttling on EDR agents, causing them to always time out, effectively blocking them

This research documents my development of payloads for the CVE-2026-46640. - CVE-2026-46640 writeup.md

Posted by Turbulent-Tap6723 - 1 vote and 1 comment

Prompt injection is the most critical vulnerability in deployed AI agents. Despite recent progress, we show that the prevailing defense paradigm (data-instruction separation) both fails to detect...

Threat intelligence report: SearchJack. Research by MalExt Sentry.

WinGet also known as Windows Package Manager, is Microsoft’s command-line for discovering, installing, upgrading, configuring, and removing applications on Windows. It is commonly used by Adm…

Yesterday Apple announced a big step towards deploying real AI in their Siri ecosystem. In most ways this is good and inevitable: Siri is one of the world’s most widely-used voice agents, and…

Today, Ivanti published an advisory.

“No way?” we hear you say. "Yes way!"

Today’s advisory outlines two vulnerabilities in Ivanti’s Sentry product, appealing directly to our inner desire for sophisticated server-side, pre-authenticated vulnerabilities.…

Three critical vulnerabilities in Jupyter Enterprise Gateway allow a notebook user to escalate privileges and fully compromise the underlying Kubernetes cluster.

wdavdaemon, the privileged Microsoft Defender daemon on macOS, restores quarantined files without revalidating the recorded path at restore time. Plant a file, let it be quarantined, then swap its parent directory for a symlink to a privileged location. The…

ASSIGNED (gabriel.petcu) in CA Program - CA Certificate Compliance. Last updated 2026-06-10.

Discover how fraudsters attack facial recognition with deepfakes and spoofing, and how liveness detection helps stop biometric attacks.

FedRAMP penetration testing guide for cloud service providers. Learn what 3PAO assessors expect, how to scope the test, and get ATO-ready in 48 hours.