Latest Insights

CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft

October 27, 2026
Bobby Gould

Read Full Article
Really Check Errors: Pointing to the Object of your Desire
December 20, 2018

Really Check Errors: Pointing to the Object of your Desire

An Insincere Form of Flattery: Impersonating Users on Microsoft Exchange
December 19, 2018

An Insincere Form of Flattery: Impersonating Users on Microsoft Exchange

Top 5 Day Two: Electron Boogaloo - A case for technodiversity
December 18, 2018

Top 5 Day Two: Electron Boogaloo - A case for technodiversity

Seeing Double: Exploiting a Blind Spot in MemGC
December 17, 2018

Seeing Double: Exploiting a Blind Spot in MemGC

When one corruption is not enough: Analyzing an Adobe Pwn2Own Exploit
December 12, 2018

When one corruption is not enough: Analyzing an Adobe Pwn2Own Exploit

DirectX to the Kernel
December 04, 2018

DirectX to the Kernel

Updates and New Targets Available in the Targeted Incentive Program
November 07, 2018

Updates and New Targets Available in the Targeted Incentive Program

Preventative Patching Produces Pwn2Own Participant’s Panic
October 31, 2018

Preventative Patching Produces Pwn2Own Participant’s Panic

CVE-2018-4338: Triggering an Information Disclosure on macOS Through a Broadcom AirPort Kext
October 24, 2018

CVE-2018-4338: Triggering an Information Disclosure on macOS Through a Broadcom AirPort Kext

CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution
October 18, 2018

CVE-2018-8460: Exposing a Double Free in Internet Explorer for Code Execution