New Abuse of the ClickOnce Technology: Part 1
Internals of the ClickOnce Deployments Now that we have an overview of the different ways a ClickOnce application can be deployed, let’s look into how it works under the…
-
-
Cisco Secure Access with MCP Infrastructure at Black Hat Asia 2026
Cisco has been a long-standing partner in securing Black Hat conferences worldwide, providing the critical network infrastructure that ensures safe connectivity for all attendees. At Black Hat Asia 2026, we continued this tradition while…
-
How We Tricked OpenClaw into Spilling Secrets
Many enterprises are plugging AI agents directly into the inbox. Agents triage email, retrieve internal data, and even respond to emails. The inbox is also the place that’s most exposed…
-
From SQLi to RCE – Exploiting LangGraph’s Checkpointer
By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers – persistence layers that store execution state. But what happens when that persistence layer isn’t locked…
-
Account Recovery, without Password Resets
One of the joys of passwordless authentication is the huge reduction in help desk tickets arising from users who have forgotten or otherwise can’t access their passwords. Organizations that have…
-
Rapid7 Named a Major Player in IDC MarketScape
Rapid7 has been named a Major Player in the IDC MarketScape: Worldwide SIEM 2026 Vendor Assessment (#US54126826, June 2026). This is the first IDC SIEM MarketScape to bring the enterprise…
-
Securing AI agents: When AI tools move from reading to acting
In this article As enterprise deployments mature, some enterprise AI agents are shifting from reading content to taking action. In this post, Microsoft Incident Response walks through an attack pattern…
-
Heavy Strategy 56: FU to the Followup
Taking your feedback and followup and discussing the questions you bring us. Zero Trust Defintions, Out of Band in Zero Trust, Johna and/or Greg is/are insufferable and re-evaluating the Tech…
-
Unmasking the crawls with Attribution Business Insights
Original content is the lifeblood of conversations and curiosities. Imagine a world without it: we could find a thousand ways to regurgitate the same material that’s already been created, but…
-
Weekly Threat Bulletin – June 10th, 2026
Sovereign Compromise: Zero-Day “MiniPlasma” Flaw Grants SYSTEM Privileges in Windows A zero-day vulnerability, designated MiniPlasma, is actively exploited within the Windows ecosystem, enabling local adversaries to achieve SYSTEM-level administrative privileges….
