Grok Bot: All Your Creds Are Belong to the Cloud
19 October 2026
A Safer Wrapper Is Not a Modernisation Strategy
05 October 2026
Finding the NetScaler SAML Crash in nsaaad
03 October 2026
NetScaler Needs More Than Another Patch
02 October 2026
CVE-2026-88772: Following a NetScaler DTLS Overflow Across Two Builds
29 September 2026
CVE-2026-88771: From a Failed NetScaler Login to a Shell
29 September 2026
Inside HackingTeam RCS: How Its Implant Protocol Compares with Modern C2 Frameworks
21 September 2026
The Mythos 5 Incidents: What Anthropic and AISI Documented
14 September 2026
CVE-2026-19490: Assessing a Candidate NetScaler SAML Alternate Path
11 September 2026
Pronico TTP Overlap: Standard Playbook or Uncommon Composition?
09 September 2026
When the Intruders Publish Their Screen Recording: Guacamaya's Pronico TTPs
08 September 2026
Inside a Network Appliance: Assessing NetScaler ADC 14.1
07 September 2026
FinFisher: reconstructing a surveillance platform from its support server
07 September 2026
When Your Expensive EDR Is Blind: Creating Your Own Detections
09 June 2026
Reversing AISURU: From Two Stripped ARM Binaries to a Live C2 Sensor
01 June 2026
From binary to working Go: reconstructing a malware sample with AI coding agents
30 May 2026
Analyzing internal Go structures in obfuscated binaries
29 May 2026
Experiments modernising old C code
18 May 2026
Synology findhostd: Auditing an Unauthenticated Endpoint Running as Root
15 April 2026
Auditing Ghidra Server Authentication: 63 Findings Across the Auth Stack
09 April 2026
Gmail Inbox Cleanup: Retention Policies, API Limits, and a CLI That Actually Works
03 April 2026
The Long Road to Crypto APIs: From IBM CCA to Crypto-Agility
12 March 2026
Customising GitHub Copilot: instructions, prompts, agents, skills, MCP, and hooks
19 February 2026
Azure Defense in Depth
23 January 2026
Secure Allocation of Memory: A 2025 Update
11 January 2026
Making it easy to implement cryptography in applications: Google Tink
08 January 2026
Side-channel pitfalls in RSA: timing leaks, fault attacks, and the trouble with constant-time code
19 February 2025
Implementing security protocols in a robust manner
06 May 2023
Dear OpenSSL project, you can do better
03 November 2022
CVE-2022-21449: implementing cryptography correct requires attention to details
23 May 2022
The stealth mechanisms of SUNBURST
21 December 2020
Intercepting Android app traffic
05 November 2019
Unwrapping malicious mail attachments
05 July 2019
Security testing flash applications with AMF
06 December 2008
Editing .NET assemblies
11 January 2008
Fast elliptic curve arithmetic in Java
22 February 2006
Secure allocation of memory
27 June 2002