Inside a Russian-Speaking Operator's Ukrainian IP Camera Toolkit

Hunt.io uncovered an open directory revealing an active intrusion into Thai ISP 3BB: FortiGate SSL-VPN exploitation via CVE-2024-21762, MeshCentral persistence, and RADIUS credential theft.

This research provides technical context that security teams can use for monitoring and validation.

Hunt.io uncovered a full APT28 Roundcube exploitation toolkit in an exposed directory: XSS payloads, a Flask C2, CSS-injection tooling and a Go implant targeting Ukrainian government webmail.

Final part of the Philips TriMedia IP camera series: a practical, step-by-step walkthrough of disassembling a TriMedia instruction, from instruction length to operation unpacking and decoding.

Part 2 of the series details the Philips TriMedia PNX1300EH CPU: its VLIW DSPCPU core with issue slots and functional units, the register model, and traits relevant to reverse engineering.

Part 1 of the series: how a D-Link DCS-5300 IP camera running an unusual Philips TriMedia CPU became a research target, plus the story behind the project and what follows.