- When Your Expensive EDR Is Blind: Creating Your Own Detections
- From binary to working Go: reconstructing a malware sample with AI coding agents
- Analyzing internal Go structures in obfuscated binaries
- Experiments modernising old C code
- Synology findhostd: Auditing an Unauthenticated Endpoint Running as Root
- Auditing Ghidra Server Authentication: 63 Findings Across the Auth Stack
- Gmail Inbox Cleanup: Retention Policies, API Limits, and a CLI That Actually Works
- The Long Road to Crypto APIs: From IBM CCA to Crypto-Agility
- Customising GitHub Copilot: instructions, prompts, agents, skills, MCP, and hooks
- Azure Defense in Depth
- Secure Allocation of Memory: A 2025 Update
- Making it easy to implement cryptography in applications: Google Tink
- Side-channel pitfalls in RSA: timing leaks, fault attacks, and the trouble with constant-time code
- Implementing security protocols in a robust manner
- Dear OpenSSL project, you can do better
- CVE-2022-21449: implementing cryptography correct requires attention to details
- The stealth mechanisms of SUNBURST
- Intercepting Android app traffic
- Unwrapping malicious mail attachments
- Security testing flash applications with AMF
- Editing .NET assemblies
- Fast elliptic curve arithmetic in Java
- Secure allocation of memory
#Ai-Assisted
#Audit
#Authentication
#Automation
#Blackbag
#C
#Claude
#Codex
#Coding-Agent
#Crypto
#Decompilation
#Detection-Engineering
#Dprk
#Firmware
#Garble
#Gcc
#Ghidra
#Gmail
#Go
#Golang
#Google-Workspace
#Grok
#Ida-Pro
#Java
#Legacy-Code
#Llm
#Macos
#Malware
#Malware-Analysis
#Modernisation
#Nsa
#Pclntab
#Pi
#Pki
#Redress
#Reverse-Engineering
#Rmi
#Rust
#Sanitizers
#Security
#Supply-Chain
#Synology
#Threat-Intelligence