Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 10)

271.

Iranian Botnet Exposed via Open Directory: 15-Node Relay Network and Active C2

research | 2026-03-17 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #botnet

272.

Skill Scanning Is Not a Security Boundary

research | 2026-03-16 13:00 | certik.com | Original ↗ | .md | #ai-security | #web3 | #open-source

273.

A Nerd's Life: Weeks of Firmware Teardown to Prove We Were Right

research | 2026-03-11 23:00 | blog.quarkslab.com | Original ↗ | .md | #hardware-security | #reverse-engineering | #firmware

274.

Twenty Years of Cloud Security Research

research | 2026-03-13 13:00 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #cloud-security

275.

Slacker Slash: Bypassing Bun Security Middleware via Normalization Desync

research | 2026-03-13 00:00 | lab.ctbb.show | Original ↗ | .md | #bun | #auth-bypass | #ctbb

276.

Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service

research | 2026-03-10 14:00 | swarm.ptsecurity.com | Original ↗ | .md | #cloud | #memory-safety | #denial-of-service

277.

Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine

research | 2026-03-11 00:00 | hunt.io | Original ↗ | .md | #ai-security | #threat-intelligence | #malware

278.

What are business logic vulnerabilities, and why are they so hard to catch?

research | 2026-03-06 05:04 | theori.io | Original ↗ | .md | #ai-security | #cloud | #appsec

279.

Bypassing debug password protection on the RH850 family using fault injection

research | 2026-03-04 23:00 | blog.quarkslab.com | Original ↗ | .md | #hardware-security | #fault-injection | #hardware

280.

Beyond Electron: Attacking Alternative Desktop Application Frameworks

research | 2026-03-03 00:00 | bishopfox.com | Original ↗ | .md | #rce | #appsec | #xss

281.

Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV

research | 2026-03-02 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #deserialization

282.

[EN] DNS Query Detection via Direct Packet Inspection

research | 2026-02-27 20:42 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #kernel | #research

283.

[PT-BR] DNS Query Detection via Direct Packet Inspection

research | 2026-02-27 20:41 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #kernel | #research

284.

Intego X9: Why your macOS antivirus should not trust PIDs

research | 2026-02-25 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #ghidra

285.

When “Read-Only” Isn’t: K8s nodes/proxy GET to RCE

research | 2026-02-27 15:59 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #kubernetes

286.

Behind DEKRA’s New SoC Cybersecurity Lab

research | 2026-02-27 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security

287.

Preventing Downloads from Unmanaged Devices in O365

research | 2026-02-24 22:19 | projectblack.io | Original ↗ | .md | #cloud | #data-exfiltration | #office-365

288.

A Deep Dive into the GetProcessHandleFromHwnd API

research | 2026-02-26 00:00 | projectzero.google | Original ↗ | .md | #windows | #uac-bypass | #google-project-zero

289.

Can a Predicted window.open Target Really Be That Impactful?

research | 2026-02-25 00:00 | lab.ctbb.show | Original ↗ | .md | #web-security | #tab-hijacking | #window-open

290.

Security boundaries in agentic architectures

research | 2026-02-24 00:00 | vercel.com | Original ↗ | .md | #ai-security | #cloud-security | #web-security

291.

Total.js RCE gadgets all around

research | 2026-02-23 00:00 | lab.ctbb.show | Original ↗ | .md | #rce | #exploitation | #gadget-chain

292.

Hackian and the Ghosts in Your Business Logic

research | 2026-02-19 00:00 | ethiack.com | Original ↗ | .md | #bug-bounty | #appsec | #access-control

293.

Fake Homebrew Pages Deliver Cuckoo Stealer via ClickFix | macOS Threat Hunting Analysis

research | 2026-02-17 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #malware | #threat-hunting

294.

Agentic Problems and the Rise of Zombie AIs

research | 2026-02-17 00:00 | ethiack.com | Original ↗ | .md | #ai-security | #prompt-injection | #llm-security

295.

Almost Impossible: Java Deserialization Through Broken Crypto in OpenText Directory Services

research | 2026-02-16 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #deserialization

296.

[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration

research | 2026-02-13 17:40 | yokai.hakaisecurity.io | Original ↗ | .md | #rce | #vulnerability-research | #research

297.

[PT-BR] Flow to Shell: Achieving RCE in Node-RED Through Misconfiguration

research | 2026-02-13 17:40 | yokai.hakaisecurity.io | Original ↗ | .md | #rce | #vulnerability-research | #research

298.

Project Black is now a CVE Numbering Authority (CNA)

research | 2026-02-11 22:07 | projectblack.io | Original ↗ | .md | #vulnerability-management | #vulnerability-research | #vulnerability-disclosure

299.

Intego X9: When your macOS antivirus becomes your enemy

research | 2026-02-09 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #macos

300.

Deep Dive into Arista NG Firewall Vulnerabilities

research | 2026-02-09 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #rce | #command-injection

← Previous More →