Finding Cleartext in Encrypted Gaming Traffic
One of the many interesting things we stumble across in the Black Hat NOC (Network Operations Center) is the various applications exhibiting poor security hygiene. Usually it’s something in the…
-
-
How to join the desync endgame: Practical tips from pentester Tom Stacey | Blog
Andrzej Matykiewicz | Thursday, 18 September 2025 at 15:51 UTC Note: This is a guest post by pentester and researcher, Tom Stacey (@t0xodile). You’d think that after almost 21 years…
-
CASI Leaderboard Shifts: Sugar-Coated Poison, and the Expanding AI Attack Surface
Introduction Recent research and vulnerability disclosures are highlighting how quickly the attack surface around AI systems is expanding. A newly described technique known as Sugar-Coated Poison (SCP) demonstrates how attackers…
-
Building a Resilient City: How Cato Rolls Out PoP Changes Safely
Imagine a new city that promises cheap housing and ultra-modern infrastructure. People move in, only to discover that the roads are constantly jammed, power cuts happen every evening, water pressure…
-
Cybersecurity’s Next Gen | Okta Security
Children are diving into the digital world earlier than ever, making it essential to instill good cyber habits from the start. This year, a staggering 80% of internet users under…
-
Understanding Claude Tag’s access model in Slack
Anthropic’s new AI agent for Slack acts under an admin-configured access bundle rather than each user’s own credentials. Here’s how that model works, what admins should understand and how to…
-
Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
In this article On July 14, 2026, Microsoft Threat Intelligence identified a coordinated supply chain compromise of the @asyncapi npm organization, a widely used set of packages for the AsyncAPI…
-
Investigating Persistence Mechanisms in AWS
Overview In the cloud, your infrastructure may be short-lived, but an attacker’s persistence doesn’t have to be. While your environment scales and changes in seconds, adversaries are embedding themselves into…
-
RabbitMQ Vulnerabilities Could Enable Unauthenticated Broker Takeover
Miggo researchers discovered two vulnerabilities that could allow attackers to seize control of vulnerable message brokers or expose data across shared environments. While there is no evidence either vulnerability has…
-
NPM ecosystem hit with two new supply chain compromises
Initially the attackers released new package versions with two malicious scripts that get executed at install time using a preinstall hook in the configuration script. The scripts also execute platform-specific…
