PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Offensive Security vs. Defensive Security: Navigating the Two Pillars of Cybersecurity

theori.io | research | #red-team | #blue-team | #offensive-security | #security-strategy | #defensive-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Xint compares offensive and defensive security — red teams simulating attacks versus blue teams hardening defences — and explains why a holistic programme needs both disciplines working together.
Published
Collected

Related coverage

research · depthfirst.com
Introducing dfbench v1
This research provides technical context that security teams can use for monitoring and validation.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
research · projectdiscovery.io
Chain-of-thought analysis of agents on offensive security tasks
# Chain-of-thought analysis of agents on offensive security tasks Sep 7, 2026 · Tarun Koyalwar Short insights from reading the chain-of-thought traces our agents left while working through...
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · blog.sentry.security
Log Curation 101
A SIEM log curation checklist: nine log source categories ranked by investigation value into tiers, guiding parser work, retention spending, and detection engineering.
research · wiz.io
Introducing Wiz Agents & Workflows: Security at the Speed of AI
Wiz launches three AI agents — Red for offensive validation, Blue for threat investigation, Green for remediation — plus Workflows, so security teams can operate at the speed of AI.
Back