corpus.blog
41,554 blogs · 5,316,985 posts Claim your blog
Back to ERNW Insinuator
Blog · corpus.blog/blogs/insinuator.net/posts

ERNW Insinuator

insinuator.net

2026

Rückblick auf die heise devSec in Marburgoriginal ↗
24 Sept 2026
Part II: Sniffing Bluetooth Auracastoriginal ↗
14 Sept 2026
Token Theft in Microsoft Entra ID (Part 2 of 4): Continuous Access Evaluationoriginal ↗
2 Sept 2026
Token Theft in Microsoft Entra ID (Part 1 of 4): Threat Landscape and Attack Techniquesoriginal ↗
24 Aug 2026
ERNW White Paper 80: Token Theft in Microsoft Entra ID - An Analysis of Controlsoriginal ↗
17 Aug 2026
From Black Hat USA 2026 to ERNW Whitepaper 78: Breaking Kubernetes Multi-Tenancyoriginal ↗
17 Aug 2026
Beats Studio Buds: Insecure Pairing Windoworiginal ↗
13 Aug 2026
ERNW White Paper 79: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detectionoriginal ↗
12 Aug 2026
TIA Project Parseroriginal ↗
12 Aug 2026
#TROOPERS26 AD & Entra ID Security Trackoriginal ↗
11 Aug 2026
Your Android Bluetooth Traffic Captures Should Be Liveoriginal ↗
27 Jul 2026
Windows Hello for Business – Full Report Has Been Releasedoriginal ↗
16 Jul 2026
TROOPERS26: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detectionoriginal ↗
29 Jun 2026
Heads-up: TROOPERS Roundtable – Supply Chain Securityoriginal ↗
22 Jun 2026
Vulnerability Disclosure: Stealing Emails via Firefox’s AI Featuresoriginal ↗
16 Jun 2026
Insights into Entra ID’s (Un)Conditional Accessoriginal ↗
21 May 2026
CVE-2026-47237 – Overly Permissive Istio Permissions Allow Kubeflow Authorization Token Stealingoriginal ↗
20 May 2026
ERNW White Paper 77: Unified Security Hardening with Cross-Platform Native Binariesoriginal ↗
20 May 2026
ERNW Whitepaper 76: Linux Client Hardening Guideoriginal ↗
19 May 2026
When paradigms are shifting: InfoSec in the age of AIoriginal ↗
30 Apr 2026
Disclosure: Command Injection in Geutebrück Camerasoriginal ↗
16 Apr 2026
Windows Early Boot Configuration: The CmControlVector and PspSystemMitigationOptionsoriginal ↗
13 Apr 2026
KubeCon + CloudNativeCon Europe 2026original ↗
1 Apr 2026
Methodology for Assessing Kubernetes Namespace-Based Multi-Tenancy Setupsoriginal ↗
26 Mar 2026
Security Considerations on Istio’s CRDs with Namespace-based Multi-Tenancyoriginal ↗
25 Mar 2026
Assessing Endpoint Protection: Our Approach to EDR/XDR and Supplements Evaluationoriginal ↗
19 Mar 2026
Vulnerabilities in Broadcom VMware Aria Operations: Privilege Escalation (CVE-2025-41245 / CVE-2026-22721)original ↗
18 Mar 2026
Hacking a Bluetooth Printer Server: GATT to UART Adapter?original ↗
12 Mar 2026
BlackBoxAI: AI Agent can get your computer fully compromisedoriginal ↗
3 Mar 2026
Vulnerability Disclosure: JWT Authentication Bypass in OpenID Connect Authenticator for Tomcatoriginal ↗
17 Feb 2026
One More Thing: Introducing the New macOS 26 Tahoe Hardening Guideoriginal ↗
11 Feb 2026
Capture Bumble Bluetooth Traffic with Wiresharkoriginal ↗
4 Feb 2026
Incident Response in GCP: Out of Scope – Out of Mindoriginal ↗
27 Jan 2026

2025

Bluetooth Headphone Jacking: Full Disclosure of Airoha RACE Vulnerabilitiesoriginal ↗
28 Dec 2025
MCTTP 2025 / Keynoteoriginal ↗
20 Oct 2025
Release of ERNW White Paper 73: Analyzing WinpMem Driver Vulnerabilitiesoriginal ↗
2 Oct 2025
Disclosure: Authentication Bypass in VERTIV Avocent AutoView (Version 2.10.0.0.4736)original ↗
8 Sept 2025
Vulnerability Disclosure: Stealing Emails via Prompt Injectionsoriginal ↗
2 Sept 2025
Windows Hello for Business - Faceplant: Planting Biometric Templatesoriginal ↗
29 Aug 2025
#TROOPERS25 AD & Entra ID Security Trackoriginal ↗
14 Aug 2025
Setting up Secure Boot on Gentoo Linuxoriginal ↗
28 Jul 2025
Windows Hello for Business - The Face Swaporiginal ↗
15 Jul 2025
Insecure Boot: Injecting initramfs from a debug shelloriginal ↗
3 Jul 2025
Security Advisory: Airoha-based Bluetooth Headphones and Earbudsoriginal ↗
26 Jun 2025
Windows Hello for Business – Past and Present Attacksoriginal ↗
20 Jun 2025
Disclosure: Multiple Vulnerabilities in X.Org X server prior to 21.1.17 and Xwayland prior to 24.1.7original ↗
17 Jun 2025
Using the Raspberry Pi Pico W as a Bluetooth Dongleoriginal ↗
13 Jun 2025
Disclosure: Input Validation Vulnerabilities in Microsoft Bookingsoriginal ↗
8 May 2025
Full Disclosure: Multiple Rundeck Job Command Injectionsoriginal ↗
5 May 2025
Vulnerability Disclosure: Restricted Shell Breakout (CVE-2025-1950) and Privilege Escalation (CVE-2025-1951) in IBM Power Hardware Management Console (HMC)original ↗
25 Apr 2025
Cookie Prefixes – The Lesser Known Cookie Security Featureoriginal ↗
8 Apr 2025
CVE-2024-11035: Minor Security Issues in VMware Carbon Black Cloudoriginal ↗
31 Mar 2025
CVE-2025-20908: Use of insufficiently random values in Samsung's Auracast implementationoriginal ↗
13 Mar 2025
When Your Edge Browser Syncs Private Data to Your Employeroriginal ↗
7 Feb 2025
Jigsaw RDPuzzle: Piecing Attacker Actions Togetheroriginal ↗
29 Jan 2025
Part I: Bluetooth Auracast from a Security Researcher’s Perspectiveoriginal ↗
27 Jan 2025

2024

Vulnerability Disclosure: Command Injection in Kemp LoadMaster Load Balancer (CVE-2024-7591)original ↗
27 Nov 2024
Vulnerability Disclosure: Authentication Bypass in Vaultwarden versions < 1.32.5 - CVE-2024-55225original ↗
22 Nov 2024
Announcement: Progress Kemp LoadMaster CVE-2024-7591original ↗
9 Sept 2024
Disclosure: Potential Limitations of Apple ADE in Corporate Usage Scenariosoriginal ↗
3 Sept 2024
CrowdStrike: What is the worldwide BSOD all about?original ↗
20 Aug 2024
Disclosure: Apple ADE – Network Based Provisioning Bypassoriginal ↗
9 Aug 2024
BMBF UNCOVER – Monitoring von Sicherheitsvorfällen in Fahrzeugenoriginal ↗
21 Jun 2024
TROOPERS24 Agenda Preview: Active Directory & Entra ID Security Trackoriginal ↗
14 Jun 2024
Security Advisory: Achieving PHP Code Execution in ILIAS eLearning LMS before v7.30/v8.11/v9.1original ↗
22 May 2024
Linux Character Devices: Exploring systemd-run and pkexecoriginal ↗
14 May 2024
Is Google Play Protect a Reliable Malware Detector?original ↗
3 May 2024
Vulnerability in Jitsi Meet: Meeting Password Disclosure affecting Meetings with Lobbiesoriginal ↗
2 May 2024
Breaking GLS Parcel Trackingoriginal ↗
25 Apr 2024
BSI Publishes Windows 10 SiSyPHuS Reports: Application Compatibility Infrastructure, Microsoft Defender Antivirus ETW Usage and Device Setup Manager Serviceoriginal ↗
16 Apr 2024
Breaking UPS Parcel Trackingoriginal ↗
10 Apr 2024
I know what you ordered last summer @ Winterkongress 2024original ↗
3 Apr 2024
Considerations on AI-Security – Part I: Introduction and Nondeterminismoriginal ↗
6 Feb 2024

2023

Student Project - Audit Frameworkoriginal ↗
20 Oct 2023
c0c0n 2023 – A Short Retrospectiveoriginal ↗
17 Oct 2023
Lua-Resty-JWT Authentication Bypassoriginal ↗
10 Oct 2023
Breaking DPD Parcel Trackingoriginal ↗
12 Sept 2023
Identification of (malicious) modifications in memory-mapped image filesoriginal ↗
6 Sept 2023
Select * from OpenStack - A Steampipe Plugin for OpenStackoriginal ↗
2 Aug 2023
All your parcel are belong to us – Talk at Troopers 2023original ↗
11 Jul 2023
The DRACO Stream Cipheroriginal ↗
21 Jun 2023
Jasper Reports Library Code Injectionoriginal ↗
13 Jun 2023
IMF Conference 2023 in Munichoriginal ↗
25 May 2023
AD /Azure Security Track on Troopers 23original ↗
5 May 2023
Hack In The Box Security Conference 2023 @ Amsterdam - Summaryoriginal ↗
4 May 2023

2022

Hilarious Buffer Overflow Mitigation and TCL Injection in CheckPoint Gaia Portaloriginal ↗
16 Dec 2022
Some experiments with Process Hollowingoriginal ↗
29 Sept 2022
Spymax: The android RAT and it works like thatoriginal ↗
7 Sept 2022
Whitepaper Endpoint Management & Monitoring Solutions Releasedoriginal ↗
10 Aug 2022
Security Advisories for Broadcom Automic Automation (UC4)original ↗
9 Jun 2022
Solving client-side controls once and for alloriginal ↗
1 Apr 2022
A Tale of an OFTP2 Vulnerabilityoriginal ↗
24 Mar 2022

2021

Release of PTE Analysis plugins for Volatility 3original ↗
31 Dec 2021
Change Your BLE Passkey Like You Change Your Underwearoriginal ↗
21 Oct 2021
ManiMed: Ypsomed AG – mylife YpsoPump System Vulnerabilitiesoriginal ↗
29 Jul 2021
Analysis of HSTS Caches of Different Browsersoriginal ↗
6 May 2021
Attack llvmpipe Graphics Driver from Chromiumoriginal ↗
4 May 2021
DogWhisperer's SharpHound Cheat Sheetoriginal ↗
4 May 2021
BSI veröffentlicht Hardening Guide, Protokollierungs-Empfehlung und zugehörige GPOs für Windows 10 im Rahmen der SiSyPHuS-Studieoriginal ↗
3 May 2021
Of Corona, Buggy Audio Drivers and Industrial Espionageoriginal ↗
23 Apr 2021
Next