A glimpse into the shadowy realm of a Chinese APT: detailed analysis of a ShadowPad intrusion.Shining New Light on an Old ROM Vulnerability: Secure Boot Bypass via DCD and CSF Tampering on NXP i.MX Devices.Public Report – IOV Labs powHSM Security Assessment.Technical Advisory – OpenJDK – Weak Parsing Logic in and Related Classes.Toner Deaf – Printing your next persistence (Hexacon 2022).Check out our new Microcorruption challenges!.Tales of Windows detection opportunities for an implant framework.Tool Release – Web3 Decoder Burp Suite Extension.Technical Advisory – NXP i.MX SDP_READ_DISABLE Fuse Bypass (CVE-2022-45163).A jq255 Elliptic Curve Specification, and a Retrospective.Public Report – Confidential Space Security Review.Public Report – VPN by Google One Security Assessment.Machine Learning 101: The Integrity of Image (Mis)Classification?.MeshyJSON: A TP-Link tdpServer JSON Stack Overflow.Puckungfu: A NETGEAR WAN Command Injection.

Technical Advisory – Multiple Vulnerabilities in the Galaxy App Store (CVE-2023-21433, CVE-2023-21434).

Technical Advisory – U-Boot – Unchecked Download Size and Direction in USB DFU (CVE-2022-2347).

Announcing NCC Group’s Cryptopals Guided Tour: Set 2.

Using Semgrep with Jupyter Notebook files.

Threat Modelling Cloud Platform Services by Example: Google Cloud Storage.

Machine Learning 102: Attacking Facial Authentication with Poisoned Data.

Rustproofing Linux (Part 1/4 Leaking Addresses).Rustproofing Linux (Part 2/4 Race Conditions).Rustproofing Linux (Part 3/4 Integer Overflows).Rustproofing Linux (Part 4/4 Shared Memory).Making New Connections – Leveraging Cisco An圜onnect Client to Drop and Run Payloads.A Race to Report a TOCTOU: Analysis of a Bug Collision in Intel SMM.Public Report – Solana Program Library ZK-Token Security Assessment.Public Report – Kubernetes 1.24 Security Audit.HITBAMS – Your Not so “Home” Office – Soho Hacking at Pwn2Own.Machine Learning 103: Exploring LLM Code Generation.Public Report – AWS Nitro System API & Security Claims.

Vmware citrix