0-Click Account Takeover Using Punycode Emails for Access — Technical Analysis (Expanded Intro + Explanations)

У коммерческих решений есть очевидные плюсы: профессиональная поддержка, регулярные аудиты, соответствие стандартам и сертификация. Open source — бесплатен, гибо...

Summary Android applications often embed web content using WebView , a component that displays webpages inside the app itself. To improve u...

Fixed in version 16.3.0.0407 — $8,500 bug bounty. Another code execution bug following my November 2024 find.

Fixed in version 16.4.0.0711 — $3,500 bug bounty

In our latest research we describe how droppers on Android are the silent malware gate keepers.

Threat Research would like to acknowledge and thank the Paranoids, Spur, and Pim Trouerbach for their collaboration to identify, track, and disrupt this activity.  Key takeaways

Trends Description

Introducing a novel technique for e-mail spoofing

In July 2024, Google introduced a new feature to better protect cookies in Chrome: AppBound Cookie Encryption. This new feature was able to disrupt the world of infostealers, forcing the malware...

A beginner's journey into secure code review, and how I accidentally rediscovered an 11-year-old vulnerability in libpng.

This report analyzes a historical class of security flaws known as “reflected vulnerabilities,”which were once potent zero-day attack vectors targeting early Windows versions and antivirussoftware. We examine classic exploitation techniques, such as parser attacks, packet fragmen-tation, and syscall abuse, which could lead to remote code execution (RCE) or privilege esca-lation. The objective is educational, demonstrating how modern defenses in Windows 11 andWindows Defender—such as Address Space Layout Randomization (ASLR), Data ExecutionPrevention (DEP), Control Flow Guard (CFG), and hardened parsers—have rendered this classof vulnerabilities obsolete. Proof-of-concept (PoC) code is provided solely to illustrate histor-ical concepts and is non-functional on modern systems, ensuring compliance with responsibledisclosure principles.

Mutation-Based XSS + V8 type confusion + V8 sandbox escape = RCE on Basecamp. Disclosed it on Hackerone: https://t.co/slsv3j4jXx go read the comments if you wanna see what a week of exploit dev pain looks like.

Learn how to use Mimkatz for hacking with this comprehensive guide to dumping credentials and performing lateral movement.

Detailing the Hanwha firmware file decryption method

Meowsterio is a traffer’s group specialised in the cryptocurrency theft, recruiting workers to spread infostealers using fake online custom-created projects as lure to phish people. The Meowsterio…

CrowdStrike researchers investigate various tactics to bypass Windows' AMSI security feature and discuss how the Falcon platform detects and protects against them.

The Trellix Advanced Research Center has uncovered a sophisticated APT malware campaign, we’ve dubbed OneClik, specifically targeting the Energy, Oil and Gas sector through phishing attacks and the exploitation of Microsoft ClickOnce.

Introduces the Search Connector Description schema that is used by Windows Explorer libraries and federated search providers.

In this post, I will introduce the "cookie sandwich" technique which lets you bypass the HttpOnly flag on certain servers. This research follows on from Bypassing WAFs with the phantom $Version cookie

JP (Translated by ChatGPT) In this article, I'll explain the intended solution for the "Tanuki Udon" challenge presented in SECCON CTF 13. TL;DR An XS-Leaks attack using Speculation Rules can be performed when the following conditions are met: The attacker can inject Speculation Rules into the victi…

Exploring the DOMPurify library: Hunting for Misconfigurations (2/2)

Technical analysis of CVE-2025-31201, a PAC bypass in libRPAC

Master AD attacks with Impacket: Kerberos exploitation, credential dumping, and lateral movement techniques for red teams.