[CRITICAL]2025-11-02Write-ups
Auth bypass chain in legacy SSO middleware
> Chained SSRF + JWT alg confusion to forge admin sessions. Patch path documented.
SSRFJWTSSO
[ MODULE: INTEL ]
Threat intelligence feed
Write-ups, CVE notes, malware reports, and GRC frameworks.
[HIGH]2025-09-18CVE Research
CVE-adjacent deserialization in ops tooling
> Unsafe object hydration allowed RCE in a CI helper. Upstream advisory filed.
RCECI/CDDeserialization
[INFO]2025-08-04GRC Frameworks
NIST CSF 2.0 control mapping notes
> Practical GRC checklist for mid-size security teams adopting CSF 2.0.
NISTGRCCSF
[HIGH]2025-06-21Malware Analysis
Signed MSI sideload RAT analysis
> Memory forensics notes on a signed MSI delivering shellcode via DLL sideload.
RATSideloadYARA
[CRITICAL]2025-04-12Write-ups
Reentrancy meets stale oracle reads
> Write-up on combining classic reentrancy with TWAP edge cases in lending pools.
SolidityOracleDeFi
[INFO]2025-02-28GRC Frameworks
SOC 2 evidence collection automation
> How we cut Type I evidence gathering time using policy-as-code and ticket hooks.
SOC2AutomationGRC