- Grok Bot: All Your Creds Are Belong to the Cloud
- A Safer Wrapper Is Not a Modernisation Strategy
- Finding the NetScaler SAML Crash in nsaaad
- NetScaler Needs More Than Another Patch
- CVE-2026-88772: Following a NetScaler DTLS Overflow Across Two Builds
- CVE-2026-88771: From a Failed NetScaler Login to a Shell
- Inside HackingTeam RCS: How Its Implant Protocol Compares with Modern C2 Frameworks
- The Mythos 5 Incidents: What Anthropic and AISI Documented
- CVE-2026-19490: Assessing a Candidate NetScaler SAML Alternate Path
- Pronico TTP Overlap: Standard Playbook or Uncommon Composition?
- When the Intruders Publish Their Screen Recording: Guacamaya's Pronico TTPs
- Inside a Network Appliance: Assessing NetScaler ADC 14.1
- FinFisher: reconstructing a surveillance platform from its support server
- When Your Expensive EDR Is Blind: Creating Your Own Detections
- Reversing AISURU: From Two Stripped ARM Binaries to a Live C2 Sensor
- From binary to working Go: reconstructing a malware sample with AI coding agents
- Analyzing internal Go structures in obfuscated binaries
- Experiments modernising old C code
- Synology findhostd: Auditing an Unauthenticated Endpoint Running as Root
- Auditing Ghidra Server Authentication: 63 Findings Across the Auth Stack
- Gmail Inbox Cleanup: Retention Policies, API Limits, and a CLI That Actually Works
- The Long Road to Crypto APIs: From IBM CCA to Crypto-Agility
- Customising GitHub Copilot: instructions, prompts, agents, skills, MCP, and hooks
- Azure Defense in Depth
- Secure Allocation of Memory: A 2025 Update
- Making it easy to implement cryptography in applications: Google Tink
- Side-channel pitfalls in RSA: timing leaks, fault attacks, and the trouble with constant-time code
- Implementing security protocols in a robust manner
- Dear OpenSSL project, you can do better
- CVE-2022-21449: implementing cryptography correct requires attention to details
- The stealth mechanisms of SUNBURST
- Intercepting Android app traffic
- Unwrapping malicious mail attachments
- Security testing flash applications with AMF
- Editing .NET assemblies
- Fast elliptic curve arithmetic in Java
- Secure allocation of memory
#Ai-Assisted
#AI-Assisted Development
#Ai-Safety
#Arm
#Audit
#Authentication
#Authentication Bypass
#Automation
#Blackbag
#Botnet
#Brute-Ratel
#C
#C2
#Censys
#Claude
#Cobalt-Strike
#Codex
#Coding-Agent
#Command Injection
#Crypto
#CVE-2026-19490
#CVE-2026-88771
#CVE-2026-88772
#CVE-2026-88779
#Cybersecurity
#Decompilation
#Denial of Service
#Detection Engineering
#Dprk
#DTLS
#Edge Devices
#Finfisher
#Firmware
#FreeBSD
#Garble
#Gcc
#Ghidra
#Gmail
#Go
#Golang
#Google-Workspace
#Grok
#Grok-Bot
#Hackingteam
#Hacktivism
#Havoc
#Ida-Pro
#Incident Response
#Iot
#Java
#Legacy Systems
#Legacy-Code
#Llm
#Macos
#Malware
#Malware-Analysis
#Memory Corruption
#Memory Safety
#Mirai
#MITRE ATT&CK
#Mitre-Attack
#Modernisation
#NetScaler
#Network Appliances
#Nsa
#Nsaaad
#Oauth
#Outflank
#Pclntab
#Pi
#Pki
#Rcs
#Redress
#Reverse Engineering
#Rmi
#Rust
#SAML
#Sanitizers
#Secure by Design
#Security
#Supply-Chain
#Supply-Chain-Security
#Synology
#Threat-Intelligence
#Threat-Model
#Threat Research