windows592 Explore a sophisticated kernel-level technique that mutates process identity structures to evade Sysmon telemetry. This research demonstrates how patching EPROCESS.UniqueProcessId and ETHREAD.Cid…
Exploit Development349 CVE-2026-53360 is a heap out-of-bounds read/write in KVM SEV-SNP Page State Change handler: the guest picks the scratch buffer size, the host…
Malware556 SLEEPWALKER is a passive Windows backdoor that never beacons, opens no listening port and carries no payload. It side-loads into ESET Management…
Exploit Development415 Two nginx rewrite-engine bugs share one root cause: an is_args flag computed in one pass and consumed in another. Pointed at r->args…
Obfuscation388 Tencent's virtual-machine obfuscation protects the ACE anti-cheat kernel drivers, complete with Intel CET shadow-stack handling and full SEH unwind support. This deep…
Red Team Operations414 BOFScale combines a modified Tailscale daemon, client, and port forwarder running as Beacon Object Files to enable in-memory C2 networking infrastructure through…
BYOVD444 CVE-2020-12446 in eneio64.sys does not corrupt anything. Its MAPPHYSTOLIN handler opens \Device\PhysicalMemory and maps the entire physical address space, read/write, into whichever…
Exploit Development404 Examining advanced shellcode architecture that eliminates reflective loaders while maintaining position independence and global instance management. This deep dive into the Stardust…
AI Security Research443 A path traversal in darwin-init, the PID 1 process that provisions every Apple Private Cloud Compute node, gave a researcher an arbitrary…
Exploit Development439 Every hardware security boundary on a modern x86 platform — SMRAM, the AMD PSP's private DRAM, the C6 save area, the live…
Audio368 veffects analyzes any track — mp3, wav, flac or midi — into a compact 160-bytes-per-frame “score” of audio features, then renders 28…
Defender491 On 12 August 2026 Nightmare Eclipse published ShieldBreak, a proof of concept that defeats Microsoft's July fix for CVE-2026-50656 (RoguePlanet) and escalates…
