Security research and Stuff

Where threats meet reality.

How intrusions actually happen, how defenses actually respond, and where the gap between the two quietly opens.

17 write-ups · research on forensics, vulnerabilities, and threat groups
Filter by research area
2026-07-21 active exploitation

Tunnel Vision: Sonicwall Insecure Mobile Access

How UTA0533 turned a WebSocket proxy and a hotfix rollback script into root on SonicWall SMA1000

2026-06-04 auth bypass

PAN-OS GlobalProtect Authentication Bypass

Cookie Monster: How CVE-2026-0257 Turns a Trust Design Decision Into a VPN Skeleton Key

2026-04-19 memory overread

CitrixBleed 3 The Franchise Nobody Asked For (CVE-2026-3055)

When your identity provider starts giving away memories it was supposed to keep

2026-02-25 auth bypass

CVE-2026-20127: Cisco Catalyst SD-WAN Authentication Bypass

Three years of silent access, one busted peering handshake, and a control plane that belonged to someone else

2026-02-17 hardcoded creds

Dell RecoverPoint for VMs (CVE-2026-22769)

When your backup appliance is also a pre-installed APT welcome mat

2026-02-15 pre-auth RCE

CVE-2026-1281: The Art of Arithmetic Expansion

Forensic analysis of pre-auth RCE exploitation in Ivanti EPMM through esoteric shell evaluation mechanics

2026-01-10 threat group

Internet Traffic Brokers: A History of TDS and the VexTrio Criminal Enterprise (Part 1)

How a Billion-Dollar Cybercrime Operation Hides Behind Legitimate AdTech

2026-01-07 unauth RCE

CVE-2025-59287 and the WSUS Deserialization Nightmare

A critical unauthenticated RCE vulnerability that turned Microsoft's patch delivery system into an attacker's dream

2026-01-06 signature bypass

Trust But Don't Verify (Forti CVE-2025-59718)

CVE-2025-59718 & CVE-2025-59719 - Who Needs Signature Verification Anyway?

2026-01-05 active exploitation

CVE-2024-53704: SonicWall Session Hijack

When 32 Null Bytes Break Authentication and SIEM Logs Miss Everything That Matters

2026-01-02 social engineering

Luna Moth: When Social Engineering Beats Malware

How ex-Conti operators are extorting millions without writing a single line of malicious code

2025-12-26 data exposure

MongoBleed Forensics

What exploitation leaves behind and what it doesn't

2025-10-07 pre-auth RCE

Oracle EBS (CVE-2025-61882)

The Zero-Day That Reminded Everyone Why ERP Means 'Everyone's Really Pwned

2025-04-26 webshell RCE

SAP NetWeaver VC (CVE-2025-31324 & CVE-2025-42999)

How an obscure endpoint turned SAP NetWeaver into a webshell wonderland

2025-01-14 auth bypass

The FortiGate Backdoor That Wasn't A Backdoor (CVE-2024-55591)

When authentication is just a really aggressive suggestion

2024-11-18 auth bypass

PAN-OS (CVE-2024-0012 and CVE-2024-9474)

When Your Security Appliance Becomes the Vulnerability

2024-10-23 auth bypass

FortiJump Diving board (CVE-2024-47575)

How Missing Auth in FortiManager Let UNC5820 Play Musical Chairs with Enterprise Networks

Research Disclaimer

Research published is provided for educational purposes. Findings reflect observed behavior in specific environments and should not be interpreted as universal truth, vendor endorsement, or operational guidance. Techniques discussed may be incomplete, ineffective, or rendered obsolete without notice. Readers are expected to apply judgment, skepticism, and basic security hygiene.