41554 blogs · [
{
"id": "01a087ae-4ce6-7304-9f07-bb0908522c83",
"title": "Sixteen strangers and a shared obfuscator: mapping the wool scene",
"url": "https://neurowinter.com/security/2026/07/28/the-cast-and-crew/",
"published_at": "2026-07-27T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb09093deca9",
"title": "The Trade Desk is on your health portal, your bank, and the lottery",
"url": "https://neurowinter.com/security/2026/07/27/The-trade-desk-on-health-bank-lottery/",
"published_at": "2026-07-26T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb090967a4dc",
"title": "Forging the government’s lottery: China’s civic apps run on a shared reward backend with no real secret",
"url": "https://neurowinter.com/security/2026/07/16/forging-the-government-lottery/",
"published_at": "2026-07-15T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb090a087a92",
"title": "Farming the farmers: smallfawn’s JD login tool routes harvested credentials to their own server",
"url": "https://neurowinter.com/security/2026/06/29/farming-the-farmers/",
"published_at": "2026-06-28T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb090a8727ec",
"title": "A weekend in the wool: mapping a Chinese reward-farming underground from one GitHub repo",
"url": "https://neurowinter.com/security/2026/06/23/a-weekend-in-the-wool/",
"published_at": "2026-06-22T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb090aaf6838",
"title": "The wool DRM, part 2: the Rust wall I didn’t crack",
"url": "https://neurowinter.com/security/2026/06/23/the-great-rust-wall/",
"published_at": "2026-06-22T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb090aaf8c0f",
"title": "The wool DRM, part 1: the Cython loader I cracked",
"url": "https://neurowinter.com/security/2026/06/23/the-wool-drm/",
"published_at": "2026-06-22T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb090b656cb6",
"title": "DragonflyDB Lua sandbox escape via getmetatable(_G) metatable override",
"url": "https://neurowinter.com/security/2026/06/10/DragonflyDB-Lua-sandbox-escape-via-getmetatable(_G)-metatable-override/",
"published_at": "2026-06-09T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb090bcab284",
"title": "HashiCorp Nomad FIFO symlink attack (CVE-2026-6959, CVE-2026-8052)",
"url": "https://neurowinter.com/security/2026/05/18/HashiCorp-Nomad-FIFO-symlink-attack/",
"published_at": "2026-05-17T12:00:00+00:00"
},
{
"id": "01a087ae-4ce6-7304-9f07-bb090c0f0d5d",
"title": "RCE and arbitrary file write in Vitess vtbackup via untrusted MANIFEST fields",
"url": "https://neurowinter.com/security/2026/05/18/RCE-and-arbitrary-file-write-in-Vitess-vtbackup-via-untrusted-MANIFEST-fields/",
"published_at": "2026-05-17T12:00:00+00:00"
}
] posts Claim your blog