Tool Release – Project Kubescout: Adding Kubernetes Support to Scout Suite.Whitepaper – Project Triforce: Run AFL On Everything (2017).A glimpse into the shadowy realm of a Chinese APT: detailed analysis of a ShadowPad intrusion.Shining New Light on an Old ROM Vulnerability: Secure Boot Bypass via DCD and CSF Tampering on NXP i.MX Devices.Public Report – IOV Labs powHSM Security Assessment.Technical Advisory – OpenJDK – Weak Parsing Logic in and Related Classes.Toner Deaf – Printing your next persistence (Hexacon 2022).Check out our new Microcorruption challenges!.

Tales of Windows detection opportunities for an implant framework.Tool Release – Web3 Decoder Burp Suite Extension.

Technical Advisory – NXP i.MX SDP_READ_DISABLE Fuse Bypass (CVE-2022-45163).

A jq255 Elliptic Curve Specification, and a Retrospective.

Public Report – Confidential Space Security Review.

Public Report – VPN by Google One Security Assessment.

Machine Learning 101: The Integrity of Image (Mis)Classification?.

MeshyJSON: A TP-Link tdpServer JSON Stack Overflow.

Puckungfu: A NETGEAR WAN Command Injection.

Technical Advisory – Multiple Vulnerabilities in the Galaxy App Store (CVE-2023-21433, CVE-2023-21434).

Technical Advisory – U-Boot – Unchecked Download Size and Direction in USB DFU (CVE-2022-2347).

Announcing NCC Group’s Cryptopals Guided Tour: Set 2.

Using Semgrep with Jupyter Notebook files.

Threat Modelling Cloud Platform Services by Example: Google Cloud Storage.

Machine Learning 102: Attacking Facial Authentication with Poisoned Data.

Rustproofing Linux (Part 1/4 Leaking Addresses).

Rustproofing Linux (Part 2/4 Race Conditions).

Rustproofing Linux (Part 3/4 Integer Overflows).

Rustproofing Linux (Part 4/4 Shared Memory).

Making New Connections – Leveraging Cisco An圜onnect Client to Drop and Run Payloads.

A Race to Report a TOCTOU: Analysis of a Bug Collision in Intel SMM.

Public Report – Solana Program Library ZK-Token Security Assessment.

Public Report – Kubernetes 1.24 Security Audit.

HITBAMS – Your Not so “Home” Office – Soho Hacking at Pwn2Own.

Machine Learning 103: Exploring LLM Code Generation.

Public Report – AWS Nitro System API & Security Claims.

Real World Cryptography Conference 2023 – Part I.

Lansweeper scanning ports