Prinz Eugen Ransomware Encrypts Your Newest Files First
A new Go-based ransomware family prioritizes recently modified files, uses RDP and legitimate remote-management tooling, and leaves no ransom note on disk. Here's what to hunt and harden.
Security Research & Analysis
Offensive thinking.
Offensive thinking.
Defensive expertise.
In-depth red team research, blue team strategy — and privacy-first security tools that run entirely in your browser. No accounts. No telemetry. No data leaves your machine.
Featured
Latest research
Archive
Recent posts
47-Day Certificates Will Make Every Website Look Like a Phishing Site
The CA/Browser Forum is cutting TLS certificate lifespans from 398 to 47 days by 2029 to reduce the value of stolen certificates. The fix creates a bigger target: the automation that now issues every certificate on the internet.
Operation Endgame Hits SocGholish: FakeUpdates Takedown
Operation Endgame's June 2026 action against SocGholish shows why fake browser updates, compromised WordPress sites, and criminal loader infrastructure still matter to defenders.
QUIC and HTTP/3: The Browser Traffic Your Proxy May Not Be Seeing
QUIC and HTTP/3 can change the path browser traffic takes through enterprise controls. Here is why TCP-focused inspection can miss policy violations, how to test it, and what defenders should fix.
ShinyHunters Were Inside Two Weeks Before Oracle Noticed
A critical, unauthenticated RCE in Oracle PeopleSoft let ShinyHunters compromise universities and other organizations for weeks before Oracle's advisory caught up. Google notified 100+ potentially exposed organizations. The technical breakdown, IOCs, and what to hunt for.
Insider Threat in 2026: The Risk Is Not Who You Trust, But What They Can Reach
Insider threat is not only about malicious employees. It is about trusted access, forgotten accounts, stolen sessions, and the controls that decide how far one identity can go.
Pwnd Blaster: How a $280 Soundbar Becomes a Wireless BadUSB
A Bluetooth flaw in Creative's Sound Blaster Katana V2X lets anyone within 15 meters flash malicious firmware and turn the soundbar into a keystroke-injecting keyboard — no pairing required.