In Which a Smartphone is Pwnt, Thoroughly and Without Reason

A look at the Android kernel driver attack surface, summarizing research progress, recurring bug classes, and directions for hardening and future driver security work.

Part 2 of the Windows Registry Adventure series, giving a brief history of the registry as a Windows feature and how its evolution shaped today's attack surface.

Part one of Project Zero's Over The Air series, turning attention from application processors to Wi-Fi chips and finding flaws in Broadcom's widely used Wi-Fi stack.

NetSPI partners share strategies for external attack surface visibility, noting how cloud adoption, remote work, and shadow IT make continuous automated asset discovery essential.

Gartner urges moving beyond vulnerability management toward exposure management. NetSPI explains how pairing external pentesting with EASM enables continuous, prioritized attack surface testing.

Spreadsheets and fragmented point tools can't keep pace with today's expanding external attack surface. The article explains why manual asset inventories break down and what modern ASM requires.