corpus.blog
54,302 blogs · [ { "id": "01a0ba09-6d18-70f0-99c3-24cc1a921261", "title": "Part II: Sniffing Bluetooth Auracast", "url": "https://insinuator.net/2026/09/auracast-part2/", "published_at": "2026-09-14T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b350ec91", "title": "Token Theft in Microsoft Entra ID (Part 2 of 4): Continuous Access Evaluation", "url": "https://insinuator.net/2026/09/token-theft-in-microsoft-entra-id-part-2-of-4-continuous-access-evaluation/", "published_at": "2026-09-02T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b447d048", "title": "Token Theft in Microsoft Entra ID (Part 1 of 4): Threat Landscape and Attack Techniques", "url": "https://insinuator.net/2026/08/token-theft-in-microsoft-entra-id-part-1-of-4-threat-landscape-and-attack-techniques/", "published_at": "2026-08-24T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b4a0dc8d", "title": "ERNW White Paper 80: Token Theft in Microsoft Entra ID - An Analysis of Controls", "url": "https://insinuator.net/2026/08/ernw-white-paper-80-token-theft-in-microsoft-entra-id-an-analysis-of-controls/", "published_at": "2026-08-17T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b4bf2e60", "title": "From Black Hat USA 2026 to ERNW Whitepaper 78: Breaking Kubernetes Multi-Tenancy", "url": "https://insinuator.net/2026/08/from-black-hat-usa-2026-to-ernw-whitepaper-78-breaking-kubernetes-multi-tenancy/", "published_at": "2026-08-17T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b53bb8a2", "title": "Beats Studio Buds: Insecure Pairing Window", "url": "https://insinuator.net/2026/08/beats-studio-buds-insecure-pairing-window/", "published_at": "2026-08-13T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b57a66b1", "title": "ERNW White Paper 79: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detection", "url": "https://insinuator.net/2026/08/ernw-white-paper-79-integrating-incident-analysis-and-digital-forensics-tooling-for-automated-compromise-detection/", "published_at": "2026-08-12T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b58f6a08", "title": "TIA Project Parser", "url": "https://insinuator.net/2026/08/tia-project-parser/", "published_at": "2026-08-12T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b5cf5a24", "title": "#TROOPERS26 AD & Entra ID Security Track", "url": "https://insinuator.net/2026/08/troopers26-ad-entra-id-security-track/", "published_at": "2026-08-11T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b6a04afc", "title": "Your Android Bluetooth Traffic Captures Should Be Live", "url": "https://insinuator.net/2026/07/your-android-bluetooth-traffic-captures-should-be-live/", "published_at": "2026-07-27T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b6d46d35", "title": "Windows Hello for Business – Full Report Has Been Released", "url": "https://insinuator.net/2026/07/windows-hello-for-business-full-report-has-been-released/", "published_at": "2026-07-16T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b79a0aa0", "title": "TROOPERS26: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detection", "url": "https://insinuator.net/2026/06/troopers26-integrating-incident-analysis-and-digital-forensics-tooling-for-automated-compromise-detection/", "published_at": "2026-06-29T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b7f17d44", "title": "Heads-up: TROOPERS Roundtable – Supply Chain Security", "url": "https://insinuator.net/2026/06/heads-up-troopers-roundtable-supply-chain-security/", "published_at": "2026-06-22T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b88bbede", "title": "Vulnerability Disclosure: Stealing Emails via Firefox’s AI Features", "url": "https://insinuator.net/2026/06/vulnerability-disclosure-stealing-emails-via-firefoxs-ai-features/", "published_at": "2026-06-16T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b8c57122", "title": "Insights into Entra ID’s (Un)Conditional Access", "url": "https://insinuator.net/2026/05/insights-into-entra-ids-unconditional-access/", "published_at": "2026-05-21T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b9449bec", "title": "CVE-2026-47237 – Overly Permissive Istio Permissions Allow Kubeflow Authorization Token Stealing", "url": "https://insinuator.net/2026/05/cve-2026-47237-overly-permissive-istio-permissions-allow-kubeflow-authorization-token-stealing/", "published_at": "2026-05-20T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9b9dea90e", "title": "ERNW White Paper 77: Unified Security Hardening with Cross-Platform Native Binaries", "url": "https://insinuator.net/2026/05/ernw-whitepaper-77-unified-security-hardening-with-cross-platform-native-binaries/", "published_at": "2026-05-20T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9ba6d838e", "title": "ERNW Whitepaper 76: Linux Client Hardening Guide", "url": "https://insinuator.net/2026/05/ernw-whitepaper-76-linux-client-hardening-guide/", "published_at": "2026-05-19T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9bad529c5", "title": "When paradigms are shifting: InfoSec in the age of AI", "url": "https://insinuator.net/2026/04/when-paradigms-are-shifting-infosec-in-the-age-of-ai/", "published_at": "2026-04-30T00:00:00+00:00" }, { "id": "01a07df3-590d-7133-afb5-e7c9bb8973c2", "title": "Disclosure: Command Injection in Geutebrück Cameras", "url": "https://insinuator.net/2026/04/disclosure-command-injection-in-geutebruck-cameras/", "published_at": "2026-04-16T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d061daf2267", "title": "Windows Early Boot Configuration: The CmControlVector and PspSystemMitigationOptions", "url": "https://insinuator.net/2026/04/windows-early-boot-configuration-the-cmcontrolvector-and-pspsystemmitigationoptions/", "published_at": "2026-04-13T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d061e12ea76", "title": "KubeCon + CloudNativeCon Europe 2026", "url": "https://insinuator.net/2026/04/kubecon-cloudnativecon-europe-2026/", "published_at": "2026-04-01T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d061e6a6c08", "title": "Methodology for Assessing Kubernetes Namespace-Based Multi-Tenancy Setups", "url": "https://insinuator.net/2026/03/methodology-for-assessing-namespace-based-multi-tenancy-setups/", "published_at": "2026-03-26T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d061ecf0490", "title": "Security Considerations on Istio’s CRDs with Namespace-based Multi-Tenancy", "url": "https://insinuator.net/2026/03/security-considerations-on-istios-crds-with-namespace-based-multi-tenancy/", "published_at": "2026-03-25T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d061f9805cf", "title": "Assessing Endpoint Protection: Our Approach to EDR/XDR and Supplements Evaluation", "url": "https://insinuator.net/2026/03/assessing-endpoint-protection-our-approach-to-edr-xdr-and-supplements-evaluation/", "published_at": "2026-03-19T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d061fe3d716", "title": "Vulnerabilities in Broadcom VMware Aria Operations: Privilege Escalation (CVE-2025-41245 / CVE-2026-22721)", "url": "https://insinuator.net/2026/03/vulnerabilities-in-broadcom-vmware-aria-operations-privilege-escalation-cve-2025-41245-cve-2026-22721/", "published_at": "2026-03-18T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0620bf5892", "title": "Hacking a Bluetooth Printer Server: GATT to UART Adapter?", "url": "https://insinuator.net/2026/03/hacking-a-bluetooth-printer-server-gatt-to-uart-adapter/", "published_at": "2026-03-12T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0621796375", "title": "BlackBoxAI: AI Agent can get your computer fully compromised", "url": "https://insinuator.net/2026/03/blackboxai-ai-agent-can-get-your-computer-fully-compromised/", "published_at": "2026-03-03T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06220d0895", "title": "Vulnerability Disclosure: JWT Authentication Bypass in OpenID Connect Authenticator for Tomcat", "url": "https://insinuator.net/2026/02/jwt-authentication-bypass-in-openid-connect-authenticator-for-tomcat/", "published_at": "2026-02-17T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0622d811ea", "title": "One More Thing: Introducing the New macOS 26 Tahoe Hardening Guide", "url": "https://insinuator.net/2026/02/one-more-thing-introducing-the-new-macos-26-tahoe-hardening-guide/", "published_at": "2026-02-11T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06234b2c0a", "title": "Capture Bumble Bluetooth Traffic with Wireshark", "url": "https://insinuator.net/2026/02/capture-bumble-bluetooth-traffic-with-wireshark/", "published_at": "2026-02-04T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0624418527", "title": "Incident Response in GCP: Out of Scope – Out of Mind", "url": "https://insinuator.net/2026/01/incident-response-in-gcp-out-of-scope-ouf-of-mind/", "published_at": "2026-01-27T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062511e10d", "title": "Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilities", "url": "https://insinuator.net/2025/12/bluetooth-headphone-jacking-full-disclosure-of-airoha-race-vulnerabilities/", "published_at": "2025-12-28T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06256d72fb", "title": "MCTTP 2025 / Keynote", "url": "https://insinuator.net/2025/10/mcttp-2025-keynote/", "published_at": "2025-10-20T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0625a1a246", "title": "Release of ERNW White Paper 73: Analyzing WinpMem Driver Vulnerabilities", "url": "https://insinuator.net/2025/10/white-paper-73-analyzing-winpmem-driver-vulnerabilities/", "published_at": "2025-10-02T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062659a3a6", "title": "Disclosure: Authentication Bypass in VERTIV Avocent AutoView (Version 2.10.0.0.4736)", "url": "https://insinuator.net/2025/09/disclosure-authentication-bypass-in-vertiv-avocent-autoview/", "published_at": "2025-09-08T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0626e09938", "title": "Vulnerability Disclosure: Stealing Emails via Prompt Injections", "url": "https://insinuator.net/2025/09/stealing-emails-via-prompt-injections/", "published_at": "2025-09-02T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06275c9728", "title": "Windows Hello for Business - Faceplant: Planting Biometric Templates", "url": "https://insinuator.net/2025/08/windows-hello-for-business-faceplant-planting-biometric-templates/", "published_at": "2025-08-29T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0627bd97b7", "title": "#TROOPERS25 AD & Entra ID Security Track", "url": "https://insinuator.net/2025/08/troopers25-ad-entra-id-security-track/", "published_at": "2025-08-14T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0627e0a9fb", "title": "Setting up Secure Boot on Gentoo Linux", "url": "https://insinuator.net/2025/07/setting-up-secure-boot-on-gentoo-linux/", "published_at": "2025-07-28T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0628c5cd7b", "title": "Windows Hello for Business - The Face Swap", "url": "https://insinuator.net/2025/07/windows-hello-for-business-the-face-swap/", "published_at": "2025-07-15T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06299b5831", "title": "Insecure Boot: Injecting initramfs from a debug shell", "url": "https://insinuator.net/2025/07/insecure-boot-injecting-initramfs-from-a-debug-shell/", "published_at": "2025-07-03T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062a9a55ea", "title": "Security Advisory: Airoha-based Bluetooth Headphones and Earbuds", "url": "https://insinuator.net/2025/06/airoha-bluetooth-security-vulnerabilities/", "published_at": "2025-06-26T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062b81afa6", "title": "Windows Hello for Business – Past and Present Attacks", "url": "https://insinuator.net/2025/06/windows-hello-for-business-past-and-present-attacks/", "published_at": "2025-06-20T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062c2a0351", "title": "Disclosure: Multiple Vulnerabilities in X.Org X server prior to 21.1.17 and Xwayland prior to 24.1.7", "url": "https://insinuator.net/2025/06/disclosure-multiple-vulnerabilities-xserver-xwayland/", "published_at": "2025-06-17T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062d1554d3", "title": "Using the Raspberry Pi Pico W as a Bluetooth Dongle", "url": "https://insinuator.net/2025/06/using-the-raspberry-pi-pico-w-as-a-bluetooth-dongle/", "published_at": "2025-06-13T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062d3b7280", "title": "Disclosure: Input Validation Vulnerabilities in Microsoft Bookings", "url": "https://insinuator.net/2025/05/disclosure-input-validation-vulnerabilities-in-microsoft-bookings/", "published_at": "2025-05-08T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062de85141", "title": "Full Disclosure: Multiple Rundeck Job Command Injections", "url": "https://insinuator.net/2025/05/full-disclosure-multiple-rundeck-job-command-injections/", "published_at": "2025-05-05T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062dfb1de9", "title": "Vulnerability Disclosure: Restricted Shell Breakout (CVE-2025-1950) and Privilege Escalation (CVE-2025-1951) in IBM Power Hardware Management Console (HMC)", "url": "https://insinuator.net/2025/04/ibm-hmc-shell-breakout-privsec/", "published_at": "2025-04-25T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062ed6f462", "title": "Cookie Prefixes – The Lesser Known Cookie Security Feature", "url": "https://insinuator.net/2025/04/cookie-prefixes-the-lesser-known-cookie-security-feature/", "published_at": "2025-04-08T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062f79da86", "title": "CVE-2024-11035: Minor Security Issues in VMware Carbon Black Cloud", "url": "https://insinuator.net/2025/03/advistory-vmware-carbon-black-cloud/", "published_at": "2025-03-31T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d062fe4a940", "title": "CVE-2025-20908: Use of insufficiently random values in Samsung's Auracast implementation", "url": "https://insinuator.net/2025/03/cve-2025-20908-use-of-insufficiently-random-values-in-samsungs-auracast-implementation/", "published_at": "2025-03-13T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0630441769", "title": "When Your Edge Browser Syncs Private Data to Your Employer", "url": "https://insinuator.net/2025/02/when-your-edge-browser-syncs-private-data-to-your-employer/", "published_at": "2025-02-07T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063105b8f9", "title": "Jigsaw RDPuzzle: Piecing Attacker Actions Together", "url": "https://insinuator.net/2025/01/jigsaw-rdpuzzle/", "published_at": "2025-01-29T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06314de4c0", "title": "Part I: Bluetooth Auracast from a Security Researcher’s Perspective", "url": "https://insinuator.net/2025/01/auracast-part1/", "published_at": "2025-01-27T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0632321ce8", "title": "Vulnerability Disclosure: Command Injection in Kemp LoadMaster Load Balancer (CVE-2024-7591)", "url": "https://insinuator.net/2024/11/vulnerability-disclosure-command-injection-in-kemp-loadmaster-load-balancer-cve-2024-7591/", "published_at": "2024-11-27T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0632d2fe46", "title": "Vulnerability Disclosure: Authentication Bypass in Vaultwarden versions < 1.32.5 - CVE-2024-55225", "url": "https://insinuator.net/2024/11/vulnerability-disclosure-authentication-bypass-in-vaultwarden-versions-1-32-5/", "published_at": "2024-11-22T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0632e278d5", "title": "Announcement: Progress Kemp LoadMaster CVE-2024-7591", "url": "https://insinuator.net/2024/09/announcement-progress-kemp-loadmaster-cve-2024-7591/", "published_at": "2024-09-09T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0633b485b0", "title": "Disclosure: Potential Limitations of Apple ADE in Corporate Usage Scenarios", "url": "https://insinuator.net/2024/09/disclosure-potential-limitations-of-apple-ade-in-corporate-usage-scenarios/", "published_at": "2024-09-03T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06342801a6", "title": "CrowdStrike: What is the worldwide BSOD all about?", "url": "https://insinuator.net/2024/08/crowdstrike-what-is-the-worldwide-bsod-all-about/", "published_at": "2024-08-20T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06348f7d78", "title": "Disclosure: Apple ADE – Network Based Provisioning Bypass", "url": "https://insinuator.net/2024/08/disclosure-apple-ade-network-based-provisioning-bypass/", "published_at": "2024-08-09T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063498b46b", "title": "BMBF UNCOVER – Monitoring von Sicherheitsvorfällen in Fahrzeugen", "url": "https://insinuator.net/2024/06/bmbf-uncover-monitoring-von-sicherheitsvorfallen-in-fahrzeugen/", "published_at": "2024-06-21T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0634b7bf4f", "title": "TROOPERS24 Agenda Preview: Active Directory & Entra ID Security Track", "url": "https://insinuator.net/2024/06/active-directory-entra-id-security-track-at-troopers-24-agenda-preview/", "published_at": "2024-06-14T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0634c36e37", "title": "Security Advisory: Achieving PHP Code Execution in ILIAS eLearning LMS before v7.30/v8.11/v9.1", "url": "https://insinuator.net/2024/05/security-advisory-achieving-php-code-execution-in-ilias-elearning-lms-before-v7-30-v8-11-v9-1/", "published_at": "2024-05-22T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0634cc628c", "title": "Linux Character Devices: Exploring systemd-run and pkexec", "url": "https://insinuator.net/2024/05/linux-character-devices-exploring-systemd-run-and-pkexec/", "published_at": "2024-05-14T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0635819245", "title": "Is Google Play Protect a Reliable Malware Detector?", "url": "https://insinuator.net/2024/05/is-google-play-protect-a-reliable-malware-detector/", "published_at": "2024-05-03T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06364a057a", "title": "Vulnerability in Jitsi Meet: Meeting Password Disclosure affecting Meetings with Lobbies", "url": "https://insinuator.net/2024/05/vulnerability-in-jitsi-meet-meeting-password-disclosure-affecting-meetings-with-lobbies/", "published_at": "2024-05-02T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0637457b48", "title": "Breaking GLS Parcel Tracking", "url": "https://insinuator.net/2024/04/breaking-gls-parcel-tracking/", "published_at": "2024-04-25T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06375aaecf", "title": "BSI Publishes Windows 10 SiSyPHuS Reports: Application Compatibility Infrastructure, Microsoft Defender Antivirus ETW Usage and Device Setup Manager Service", "url": "https://insinuator.net/2024/04/bsi-publishes-windows-10-sisyphus-reports-application-compatibility-infrastructure-microsoft-defender-antivirus-etw-usage-and-device-setup-manager-service/", "published_at": "2024-04-16T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0637c59854", "title": "Breaking UPS Parcel Tracking", "url": "https://insinuator.net/2024/04/breaking-ups-parcel-tracking/", "published_at": "2024-04-10T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063881f3c4", "title": "I know what you ordered last summer @ Winterkongress 2024", "url": "https://insinuator.net/2024/04/i-know-what-you-ordered-last-summer-winterkongress-2024/", "published_at": "2024-04-03T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0638bff2f5", "title": "Considerations on AI-Security – Part I: Introduction and Nondeterminism", "url": "https://insinuator.net/2024/02/considerations-on-ai-security-part-i-introduction-and-nondeterminism/", "published_at": "2024-02-06T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06395f39d2", "title": "Student Project - Audit Framework", "url": "https://insinuator.net/2023/10/student-project-audit-framework/", "published_at": "2023-10-20T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06397eaa8e", "title": "c0c0n 2023 – A Short Retrospective", "url": "https://insinuator.net/2023/10/c0c0n-2023-a-short-retrospective/", "published_at": "2023-10-17T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0639b68d8f", "title": "Lua-Resty-JWT Authentication Bypass", "url": "https://insinuator.net/2023/10/lua-resty-jwt-authentication-bypass/", "published_at": "2023-10-10T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063aa2c519", "title": "Breaking DPD Parcel Tracking", "url": "https://insinuator.net/2023/09/breaking-dpd-parcel-tracking/", "published_at": "2023-09-12T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063b83c636", "title": "Identification of (malicious) modifications in memory-mapped image files", "url": "https://insinuator.net/2023/09/identification-of-malicious-modifications-in-memory-mapped-image-files/", "published_at": "2023-09-06T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063bd8605c", "title": "Select * from OpenStack - A Steampipe Plugin for OpenStack", "url": "https://insinuator.net/2023/08/steampipe-plugin-openstack/", "published_at": "2023-08-02T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063c24f65b", "title": "All your parcel are belong to us – Talk at Troopers 2023", "url": "https://insinuator.net/2023/07/all-your-parcel-are-belong-to-us-talk-at-troopers-2023/", "published_at": "2023-07-11T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063cdbd07a", "title": "The DRACO Stream Cipher", "url": "https://insinuator.net/2023/06/the-draco-stream-cipher/", "published_at": "2023-06-21T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063dadac9f", "title": "Jasper Reports Library Code Injection", "url": "https://insinuator.net/2023/06/jasper-reports-library-code-injection/", "published_at": "2023-06-13T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063e70e293", "title": "IMF Conference 2023 in Munich", "url": "https://insinuator.net/2023/05/imf-conference-2023-in-munich/", "published_at": "2023-05-25T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063f0ece8e", "title": "AD /Azure Security Track on Troopers 23", "url": "https://insinuator.net/2023/05/ad-azure-security-track-on-troopers-23/", "published_at": "2023-05-05T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d063f9d7eb8", "title": "Hack In The Box Security Conference 2023 @ Amsterdam - Summary", "url": "https://insinuator.net/2023/05/hack-in-the-box-security-conference-2023-amsterdam-summary/", "published_at": "2023-05-04T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d064079bc06", "title": "Hilarious Buffer Overflow Mitigation and TCL Injection in CheckPoint Gaia Portal", "url": "https://insinuator.net/2022/12/hilarious-buffer-overflow-mitigation-and-tcl-injection-in-checkpoint-gaia-portal/", "published_at": "2022-12-16T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0641063abd", "title": "Some experiments with Process Hollowing", "url": "https://insinuator.net/2022/09/some-experiments-with-process-hollowing/", "published_at": "2022-09-29T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0641790b8e", "title": "Spymax: The android RAT and it works like that", "url": "https://insinuator.net/2022/09/spymax-the-android-rat-and-it-works-like-that/", "published_at": "2022-09-07T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0641dc5651", "title": "Whitepaper Endpoint Management & Monitoring Solutions Released", "url": "https://insinuator.net/2022/08/whitepaper-endpoint-management-monitoring-solutions-released/", "published_at": "2022-08-10T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0642cfb5a5", "title": "Security Advisories for Broadcom Automic Automation (UC4)", "url": "https://insinuator.net/2022/06/security-advisories-for-broadcom-automic-automation-uc4/", "published_at": "2022-06-09T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0643a2a3af", "title": "Solving client-side controls once and for all", "url": "https://insinuator.net/2022/04/solving-client-side-controls-once-and-for-all/", "published_at": "2022-04-01T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0643cd4426", "title": "A Tale of an OFTP2 Vulnerability", "url": "https://insinuator.net/2022/03/a-tale-of-an-oftp2-vulnerability/", "published_at": "2022-03-24T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06447e658c", "title": "Release of PTE Analysis plugins for Volatility 3", "url": "https://insinuator.net/2021/12/release-of-pte-analysis-plugins-for-volatility-3/", "published_at": "2021-12-31T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06453a39b8", "title": "Change Your BLE Passkey Like You Change Your Underwear", "url": "https://insinuator.net/2021/10/change-your-ble-passkey-like-you-change-your-underwear/", "published_at": "2021-10-21T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0645e2edeb", "title": "ManiMed: Ypsomed AG – mylife YpsoPump System Vulnerabilities", "url": "https://insinuator.net/2021/07/manimed-ypsomed-ag-mylife-ypsopump-system-vulnerabilities/", "published_at": "2021-07-29T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06464dc8f6", "title": "Analysis of HSTS Caches of Different Browsers", "url": "https://insinuator.net/2021/05/analysis-of-hsts-caches-of-different-browsers/", "published_at": "2021-05-06T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06466d608e", "title": "Attack llvmpipe Graphics Driver from Chromium", "url": "https://insinuator.net/2021/05/attack-llvmpipe-graphics-driver-from-chromium/", "published_at": "2021-05-04T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d06475d7047", "title": "DogWhisperer's SharpHound Cheat Sheet", "url": "https://insinuator.net/2021/05/dogwhisperers-sharphound-cheat-sheet/", "published_at": "2021-05-04T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0648531981", "title": "BSI veröffentlicht Hardening Guide, Protokollierungs-Empfehlung und zugehörige GPOs für Windows 10 im Rahmen der SiSyPHuS-Studie", "url": "https://insinuator.net/2021/05/bsi-veroffentlicht-hardening-guide-protokollierungs-empfehlung-und-zugehorige-gpos-fur-windows-10-im-rahmen-der-sisyphus-studie/", "published_at": "2021-05-03T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d0648bef848", "title": "Of Corona, Buggy Audio Drivers and Industrial Espionage", "url": "https://insinuator.net/2021/04/of-corona-buggy-audio-drivers-and-industrial-espionage/", "published_at": "2021-04-23T00:00:00+00:00" }, { "id": "01a07df3-590e-725e-bf0a-1d064982e54e", "title": "Summary of 'Software-Defined Radio applied to security assessments' at Troopers21", "url": "https://insinuator.net/2021/04/summary-of-software-defined-radio-applied-to-security-assessments-at-troopers21/", "published_at": "2021-04-20T00:00:00+00:00" } ] posts Claim your blog
Back to ERNW Insinuator
Blog · corpus.blog/blogs/insinuator.net/posts

ERNW Insinuator

insinuator.net

2026

Part II: Sniffing Bluetooth Auracastoriginal ↗
14 Sept 2026
Token Theft in Microsoft Entra ID (Part 2 of 4): Continuous Access Evaluationoriginal ↗
2 Sept 2026
Token Theft in Microsoft Entra ID (Part 1 of 4): Threat Landscape and Attack Techniquesoriginal ↗
24 Aug 2026
ERNW White Paper 80: Token Theft in Microsoft Entra ID - An Analysis of Controlsoriginal ↗
17 Aug 2026
From Black Hat USA 2026 to ERNW Whitepaper 78: Breaking Kubernetes Multi-Tenancyoriginal ↗
17 Aug 2026
Beats Studio Buds: Insecure Pairing Windoworiginal ↗
13 Aug 2026
ERNW White Paper 79: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detectionoriginal ↗
12 Aug 2026
TIA Project Parseroriginal ↗
12 Aug 2026
#TROOPERS26 AD & Entra ID Security Trackoriginal ↗
11 Aug 2026
Your Android Bluetooth Traffic Captures Should Be Liveoriginal ↗
27 Jul 2026
Windows Hello for Business – Full Report Has Been Releasedoriginal ↗
16 Jul 2026
TROOPERS26: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detectionoriginal ↗
29 Jun 2026
Heads-up: TROOPERS Roundtable – Supply Chain Securityoriginal ↗
22 Jun 2026
Vulnerability Disclosure: Stealing Emails via Firefox’s AI Featuresoriginal ↗
16 Jun 2026
Insights into Entra ID’s (Un)Conditional Accessoriginal ↗
21 May 2026
CVE-2026-47237 – Overly Permissive Istio Permissions Allow Kubeflow Authorization Token Stealingoriginal ↗
20 May 2026
ERNW White Paper 77: Unified Security Hardening with Cross-Platform Native Binariesoriginal ↗
20 May 2026
ERNW Whitepaper 76: Linux Client Hardening Guideoriginal ↗
19 May 2026
When paradigms are shifting: InfoSec in the age of AIoriginal ↗
30 Apr 2026
Disclosure: Command Injection in Geutebrück Camerasoriginal ↗
16 Apr 2026
Windows Early Boot Configuration: The CmControlVector and PspSystemMitigationOptionsoriginal ↗
13 Apr 2026
KubeCon + CloudNativeCon Europe 2026original ↗
1 Apr 2026
Methodology for Assessing Kubernetes Namespace-Based Multi-Tenancy Setupsoriginal ↗
26 Mar 2026
Security Considerations on Istio’s CRDs with Namespace-based Multi-Tenancyoriginal ↗
25 Mar 2026
Assessing Endpoint Protection: Our Approach to EDR/XDR and Supplements Evaluationoriginal ↗
19 Mar 2026
Vulnerabilities in Broadcom VMware Aria Operations: Privilege Escalation (CVE-2025-41245 / CVE-2026-22721)original ↗
18 Mar 2026
Hacking a Bluetooth Printer Server: GATT to UART Adapter?original ↗
12 Mar 2026
BlackBoxAI: AI Agent can get your computer fully compromisedoriginal ↗
3 Mar 2026
Vulnerability Disclosure: JWT Authentication Bypass in OpenID Connect Authenticator for Tomcatoriginal ↗
17 Feb 2026
One More Thing: Introducing the New macOS 26 Tahoe Hardening Guideoriginal ↗
11 Feb 2026
Capture Bumble Bluetooth Traffic with Wiresharkoriginal ↗
4 Feb 2026
Incident Response in GCP: Out of Scope – Out of Mindoriginal ↗
27 Jan 2026

2025

Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilitiesoriginal ↗
28 Dec 2025
MCTTP 2025 / Keynoteoriginal ↗
20 Oct 2025
Release of ERNW White Paper 73: Analyzing WinpMem Driver Vulnerabilitiesoriginal ↗
2 Oct 2025
Disclosure: Authentication Bypass in VERTIV Avocent AutoView (Version 2.10.0.0.4736)original ↗
8 Sept 2025
Vulnerability Disclosure: Stealing Emails via Prompt Injectionsoriginal ↗
2 Sept 2025
Windows Hello for Business - Faceplant: Planting Biometric Templatesoriginal ↗
29 Aug 2025
#TROOPERS25 AD & Entra ID Security Trackoriginal ↗
14 Aug 2025
Setting up Secure Boot on Gentoo Linuxoriginal ↗
28 Jul 2025
Windows Hello for Business - The Face Swaporiginal ↗
15 Jul 2025
Insecure Boot: Injecting initramfs from a debug shelloriginal ↗
3 Jul 2025
Security Advisory: Airoha-based Bluetooth Headphones and Earbudsoriginal ↗
26 Jun 2025
Windows Hello for Business – Past and Present Attacksoriginal ↗
20 Jun 2025
Disclosure: Multiple Vulnerabilities in X.Org X server prior to 21.1.17 and Xwayland prior to 24.1.7original ↗
17 Jun 2025
Using the Raspberry Pi Pico W as a Bluetooth Dongleoriginal ↗
13 Jun 2025
Disclosure: Input Validation Vulnerabilities in Microsoft Bookingsoriginal ↗
8 May 2025
Full Disclosure: Multiple Rundeck Job Command Injectionsoriginal ↗
5 May 2025
Vulnerability Disclosure: Restricted Shell Breakout (CVE-2025-1950) and Privilege Escalation (CVE-2025-1951) in IBM Power Hardware Management Console (HMC)original ↗
25 Apr 2025
Cookie Prefixes – The Lesser Known Cookie Security Featureoriginal ↗
8 Apr 2025
CVE-2024-11035: Minor Security Issues in VMware Carbon Black Cloudoriginal ↗
31 Mar 2025
CVE-2025-20908: Use of insufficiently random values in Samsung's Auracast implementationoriginal ↗
13 Mar 2025
When Your Edge Browser Syncs Private Data to Your Employeroriginal ↗
7 Feb 2025
Jigsaw RDPuzzle: Piecing Attacker Actions Togetheroriginal ↗
29 Jan 2025
Part I: Bluetooth Auracast from a Security Researcher’s Perspectiveoriginal ↗
27 Jan 2025

2024

Vulnerability Disclosure: Command Injection in Kemp LoadMaster Load Balancer (CVE-2024-7591)original ↗
27 Nov 2024
Vulnerability Disclosure: Authentication Bypass in Vaultwarden versions < 1.32.5 - CVE-2024-55225original ↗
22 Nov 2024
Announcement: Progress Kemp LoadMaster CVE-2024-7591original ↗
9 Sept 2024
Disclosure: Potential Limitations of Apple ADE in Corporate Usage Scenariosoriginal ↗
3 Sept 2024
CrowdStrike: What is the worldwide BSOD all about?original ↗
20 Aug 2024
Disclosure: Apple ADE – Network Based Provisioning Bypassoriginal ↗
9 Aug 2024
BMBF UNCOVER – Monitoring von Sicherheitsvorfällen in Fahrzeugenoriginal ↗
21 Jun 2024
TROOPERS24 Agenda Preview: Active Directory & Entra ID Security Trackoriginal ↗
14 Jun 2024
Security Advisory: Achieving PHP Code Execution in ILIAS eLearning LMS before v7.30/v8.11/v9.1original ↗
22 May 2024
Linux Character Devices: Exploring systemd-run and pkexecoriginal ↗
14 May 2024
Is Google Play Protect a Reliable Malware Detector?original ↗
3 May 2024
Vulnerability in Jitsi Meet: Meeting Password Disclosure affecting Meetings with Lobbiesoriginal ↗
2 May 2024
Breaking GLS Parcel Trackingoriginal ↗
25 Apr 2024
BSI Publishes Windows 10 SiSyPHuS Reports: Application Compatibility Infrastructure, Microsoft Defender Antivirus ETW Usage and Device Setup Manager Serviceoriginal ↗
16 Apr 2024
Breaking UPS Parcel Trackingoriginal ↗
10 Apr 2024
I know what you ordered last summer @ Winterkongress 2024original ↗
3 Apr 2024
Considerations on AI-Security – Part I: Introduction and Nondeterminismoriginal ↗
6 Feb 2024

2023

Student Project - Audit Frameworkoriginal ↗
20 Oct 2023
c0c0n 2023 – A Short Retrospectiveoriginal ↗
17 Oct 2023
Lua-Resty-JWT Authentication Bypassoriginal ↗
10 Oct 2023
Breaking DPD Parcel Trackingoriginal ↗
12 Sept 2023
Identification of (malicious) modifications in memory-mapped image filesoriginal ↗
6 Sept 2023
Select * from OpenStack - A Steampipe Plugin for OpenStackoriginal ↗
2 Aug 2023
All your parcel are belong to us – Talk at Troopers 2023original ↗
11 Jul 2023
The DRACO Stream Cipheroriginal ↗
21 Jun 2023
Jasper Reports Library Code Injectionoriginal ↗
13 Jun 2023
IMF Conference 2023 in Munichoriginal ↗
25 May 2023
AD /Azure Security Track on Troopers 23original ↗
5 May 2023
Hack In The Box Security Conference 2023 @ Amsterdam - Summaryoriginal ↗
4 May 2023

2022

Hilarious Buffer Overflow Mitigation and TCL Injection in CheckPoint Gaia Portaloriginal ↗
16 Dec 2022
Some experiments with Process Hollowingoriginal ↗
29 Sept 2022
Spymax: The android RAT and it works like thatoriginal ↗
7 Sept 2022
Whitepaper Endpoint Management & Monitoring Solutions Releasedoriginal ↗
10 Aug 2022
Security Advisories for Broadcom Automic Automation (UC4)original ↗
9 Jun 2022
Solving client-side controls once and for alloriginal ↗
1 Apr 2022
A Tale of an OFTP2 Vulnerabilityoriginal ↗
24 Mar 2022

2021

Release of PTE Analysis plugins for Volatility 3original ↗
31 Dec 2021
Change Your BLE Passkey Like You Change Your Underwearoriginal ↗
21 Oct 2021
ManiMed: Ypsomed AG – mylife YpsoPump System Vulnerabilitiesoriginal ↗
29 Jul 2021
Analysis of HSTS Caches of Different Browsersoriginal ↗
6 May 2021
Attack llvmpipe Graphics Driver from Chromiumoriginal ↗
4 May 2021
DogWhisperer's SharpHound Cheat Sheetoriginal ↗
4 May 2021
BSI veröffentlicht Hardening Guide, Protokollierungs-Empfehlung und zugehörige GPOs für Windows 10 im Rahmen der SiSyPHuS-Studieoriginal ↗
3 May 2021
Of Corona, Buggy Audio Drivers and Industrial Espionageoriginal ↗
23 Apr 2021
Summary of 'Software-Defined Radio applied to security assessments' at Troopers21original ↗
20 Apr 2021
Next