Blogs
BlogsStrikeShark & SharkLoader Dissected: Inside the Unattributed APT Campaign Hitting Diplomats, Governments, and Software Firms Across 9 CountriesKaspersky's GReAT exposed StrikeShark, an unattributed APT campaign hitting diplomats, governments, and software firms across 9 countries. Dissect SharkLoader's four-stage loading chain,…Read →BlogsCVE-2026-42985 Deep Dive: Weaponizing the RDP Client Use-After-Free for Rogue-Server RCECVE-2026-42985 flips the RDP threat model: a rogue server exploits a use-after-free in mstscax.dll to achieve RCE on the connecting client. This…Read →BlogsCVE-2026-47291 Teardown: Inside the HTTP.sys Integer Overflow That Gives Attackers Kernel-Mode RCE on Every Unpatched Windows ServerCVE-2026-47291 is a CVSS 9.8 integer overflow in http.sys that lets unauthenticated attackers execute code in kernel mode on any Windows Server…Read →BlogsMiasma / Mini Shai-Hulud: Dissecting the Wormable npm Supply Chain Attack That Hit 32 Red Hat PackagesA stolen GitHub session cookie bypassed MFA and triggered a wormable npm supply chain attack across 32 Red Hat packages - each…Read →BlogsCVE-2026-45657 Teardown: Hunting the Wormable Windows Kernel TCP/IP Use-After-FreeCVE-2026-45657 is a CVSS 9.8 wormable use-after-free in the Windows kernel TCP/IP stack - unauthenticated, no user interaction, network-reachable. This teardown covers…Read →BlogsNightmare Eclipse vs. Microsoft: Anatomy of the Defender Zero-Day SagaOne architectural flaw in Windows Defender's privileged file-operation model spawned four exploits - BlueHammer, RedSun, UnDefend, and RoguePlanet. Three are patched. One…Read →BlogsGreenPlasma, MiniPlasma & RoguePlanet: Anatomy of 2026’s Chaotic Eclipse Windows SYSTEM Zero-DaysThree Windows LPE zero-days from the Chaotic Eclipse campaign - GreenPlasma, MiniPlasma, and RoguePlanet - exploit link-following and TOCTOU flaws in CTF,…Read →BlogsLow-Level Keylogger Architectures: A Deep Dive into Windows Input Capture MechanismsIn this deep dive, we're gonna break down different keylogger implementation techniques, how they actually work under the hood in the Windows…Read →