EDRChoker redteam tool uses Policy-based QoS - pacer.sys to set throttling on EDR agents, causing them to always time out, effectively blocking them

This research documents my development of payloads for the CVE-2026-46640. - CVE-2026-46640 writeup.md

Posted by Turbulent-Tap6723 - 1 vote and 1 comment

Prompt injection is the most critical vulnerability in deployed AI agents. Despite recent progress, we show that the prevailing defense paradigm (data-instruction separation) both fails to detect...

Threat intelligence report: SearchJack. Research by MalExt Sentry.

WinGet also known as Windows Package Manager, is Microsoft’s command-line for discovering, installing, upgrading, configuring, and removing applications on Windows. It is commonly used by Adm…

Yesterday Apple announced a big step towards deploying real AI in their Siri ecosystem. In most ways this is good and inevitable: Siri is one of the world’s most widely-used voice agents, and…

Today, Ivanti published an advisory.

“No way?” we hear you say. "Yes way!"

Today’s advisory outlines two vulnerabilities in Ivanti’s Sentry product, appealing directly to our inner desire for sophisticated server-side, pre-authenticated vulnerabilities.…

Three critical vulnerabilities in Jupyter Enterprise Gateway allow a notebook user to escalate privileges and fully compromise the underlying Kubernetes cluster.

wdavdaemon, the privileged Microsoft Defender daemon on macOS, restores quarantined files without revalidating the recorded path at restore time. Plant a file, let it be quarantined, then swap its parent directory for a symlink to a privileged location. The…

ASSIGNED (gabriel.petcu) in CA Program - CA Certificate Compliance. Last updated 2026-06-10.

Discover how fraudsters attack facial recognition with deepfakes and spoofing, and how liveness detection helps stop biometric attacks.

FedRAMP penetration testing guide for cloud service providers. Learn what 3PAO assessors expect, how to scope the test, and get ATO-ready in 48 hours.

Two security tools in one CLI. Audit your code, or attack it. Same binary, two tabs.

A pre-authentication XXE injection on ArubaOS 8.13.2.0 port 32000 enables OOB SSRF. Confirmed via wire-level pcap and the controller's own sshd logs. Submitted to HPE Bugcrowd — closed as theoretical despite four evidence items.

Map auth flows, scan domains A-F, analyse HAR files, and auto-populate your asset inventory. The AI-native security workspace built for serious security work.

What happens when you unleash an AI across all of Google's infrastructure? 1,500 APIs, 3,600 keys, and $500,000 in bounties later, here's what I found.