Rhysida Ransomware analysis - A painful sting to Insomniac Games Hack

Abuse the CLR memory (un)safety

Uncover the KV-Botnet, a covert network targeting SOHO routers. Learn about its complex infection and command-and-control techniques.

Blind XSS fired on Admin panel worth $2000 Introduction: Hello Hacker!!! $whoami I am Feri Susanto (fer1bytex0) from indonesia. it is my first Write Up, In this writeup, we will discuss a found Blind …

After the shutdown of its leak site in October, we look at how ransomware group Trigona operated during its period of activity and discuss how enterprises can fortify their defenses against similar threats.

This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.

CISA and partner cybersecurity agencies and intelligence services warned that the APT29 hacking group linked to Russia's Foreign Intelligence Service (SVR) has been targeting unpatched TeamCity servers in widespread attacks since September 2023.

Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164") - dwisiswant0/cve-2023-50164-poc

Research by: hasherezade Highlights Introduction Rhadamanthys is an information stealer with a diverse set of modules and an interesting multilayered design. In our last article on Rhadamanthys [1], we focused on the custom executable formats used by this…

Introducing a novel technique for e-mail spoofing

This report is a little different than our typical content. We were able to analyze data from a perspective we typically don’t get to see… a threat actor’s host! In early November…

PowerShell PE Parser. Contribute to jonny-jhnson/PowerParse development by creating an account on GitHub.

CVE-2023-6817, poses a severe threat with a CVSS score of 7.8, categorizing it as a high-severity issue, also PoC exploit published.

The story of CVE-2023-6483, my first CVE and biggest security disclosure yet.

ESET researchers document a series of new OilRig downloaders, all relying on legitimate cloud service providers for C&C communications.