Cochavi Blog
Ruler: A Webapp for Testing, Writing, and Sharing Suricata Rules
We released a tool for helping network detection engineers test and share rules!
Lees het artikel
29 jul 2026
Onderzoek
Vanuit het veld.
Berichten, artikelen en persberichten van ons team en de bredere Europese security-gemeenschap.
Abonneren via Atom
Paradoxis Blog
Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)
TL;DR: it was possible to obtain NT AUTHORITY\SYSTEM privileges from the perspective of an unprivileged user using Foxit PDF Reader. The vulnerability…
Lees het artikel
15 jul 2026
Paradoxis Blog
Playing Around With ADIDNS RPC Internals
TL;DR: I ported the functionality of dnscmd.exe into (slightly) more OPSEC safe Beacon Object Files (BOFs) so you can get domain admin rights when you…
Lees het artikel
03 jul 2026
K Blog
I Turned to a Griefbot for Comfort… Instead, It Made Me Anxious
A few weeks ago, I was introduced to so-called griefbots, which are AI systems designed to simulate a deceased person. They are meant to facilitate the grief period by allowing users to interact with their deceased…
Lees het artikel
29 apr 2026
K Blog
The Hack That Shook Mexico’s Military: Inside the Guacamaya Leaks
Remember how a few weeks ago numerous news articles covered how Mexican authorities had captured El Mencho, leader of the Jalisco New Generation Cartel? The arrest, and the violence it caused, was widely reported…
Lees het artikel
06 mrt 2026
Paradoxis Blog
Decrypting MultiDesk Passwords
TL;DR: This blog goes into figuring out how MultiDesk encrypts passwords and how to decrypt them. You can find the tool here, or just load the keys into…
Lees het artikel
17 feb 2026
Cochavi Blog
Skill Issues: An OpenClaw Malware Campaign
We found an active malware campaign on ClawHub!
Lees het artikel
02 feb 2026
Cochavi Blog
Writeup: you_know_0xdiablos
Writeup of 'you_know_0xdiablos', a pwn challenge on HTB
Lees het artikel
17 jan 2026
Paradoxis Blog
Applying Cluster Wide mTLS Certificactes in Kubernetes (Ingress Nginx)
I’m deviating from my regular offensive-security related blog activities today to stray a little towards more sysadmin related stuff, if you’re not into…
Lees het artikel
29 nov 2025
NRC
De ict-man let soms niet op, en dan liggen opeens honderdduizenden paspoorten op straat
NRC profile featuring our work on data exposure and sovereign security practice.
Lees het artikel
03 sep 2025