Blogs

BlogsStrikeShark & SharkLoader Dissected: Inside the Unattributed APT Campaign Hitting Diplomats, Governments, and Software Firms Across 9 CountriesKaspersky's GReAT exposed StrikeShark, an unattributed APT campaign hitting diplomats, governments, and software firms across 9 countries. Dissect SharkLoader's four-stage loading chain,…Jun 25, 2026 · 19 min readRead →BlogsCVE-2026-42985 Deep Dive: Weaponizing the RDP Client Use-After-Free for Rogue-Server RCECVE-2026-42985 flips the RDP threat model: a rogue server exploits a use-after-free in mstscax.dll to achieve RCE on the connecting client. This…Jun 24, 2026 · 15 min readRead →BlogsCVE-2026-47291 Teardown: Inside the HTTP.sys Integer Overflow That Gives Attackers Kernel-Mode RCE on Every Unpatched Windows ServerCVE-2026-47291 is a CVSS 9.8 integer overflow in http.sys that lets unauthenticated attackers execute code in kernel mode on any Windows Server…Jun 23, 2026 · 20 min readRead →BlogsMiasma / Mini Shai-Hulud: Dissecting the Wormable npm Supply Chain Attack That Hit 32 Red Hat PackagesA stolen GitHub session cookie bypassed MFA and triggered a wormable npm supply chain attack across 32 Red Hat packages - each…Jun 22, 2026 · 16 min readRead →BlogsCVE-2026-45657 Teardown: Hunting the Wormable Windows Kernel TCP/IP Use-After-FreeCVE-2026-45657 is a CVSS 9.8 wormable use-after-free in the Windows kernel TCP/IP stack - unauthenticated, no user interaction, network-reachable. This teardown covers…Jun 22, 2026 · 22 min readRead →BlogsNightmare Eclipse vs. Microsoft: Anatomy of the Defender Zero-Day SagaOne architectural flaw in Windows Defender's privileged file-operation model spawned four exploits - BlueHammer, RedSun, UnDefend, and RoguePlanet. Three are patched. One…Jun 22, 2026 · 16 min readRead →BlogsGreenPlasma, MiniPlasma & RoguePlanet: Anatomy of 2026’s Chaotic Eclipse Windows SYSTEM Zero-DaysThree Windows LPE zero-days from the Chaotic Eclipse campaign - GreenPlasma, MiniPlasma, and RoguePlanet - exploit link-following and TOCTOU flaws in CTF,…Jun 20, 2026 · 18 min readRead →BlogsLow-Level Keylogger Architectures: A Deep Dive into Windows Input Capture MechanismsIn this deep dive, we're gonna break down different keylogger implementation techniques, how they actually work under the hood in the Windows…Dec 27, 2025 · 16 min readRead →