Security
- SecurityArticle
QuadRF Uses Phased-Array Radio to Track Drones and Detect WiFi
Jeff Geerling describes QuadRF, a phased-array radio built around a Raspberry Pi 5 and FPGA board. It uses signal processing and beamforming to track drones and detect WiFi through walls.
Its sensing capabilities are relevant to engineers assessing wireless privacy and security.
- SecurityPaper
Intel refreshes paper on memory protections for confidential computing
Intel refreshed its “Intel Architecture Memory Protections for Confidential Computing” technical paper, document 869103.
The paper may help engineers understand Intel architecture memory protections used in confidential computing.
- SecurityArticle
Tradecraft Garden publishes evasion research and linker tooling
Tradecraft Garden shares evasion tradecraft openly. The post describes Crystal Palace, a linker with code transformation and randomization features, YARA rule generation, and support for reusable tradecraft modules.
The techniques may help red teams test capabilities and defenders evaluate detection coverage.
- SecurityProject
Strix: Open-Source AI Penetration Testing Tool
Strix is an open-source AI penetration testing tool for finding and fixing application vulnerabilities.
Engineers can review the repository as a potential tool for application security testing.
- SecurityArticle
VulHunt: a framework for binary vulnerability detection
VulHunt is a vulnerability detection framework from Binarly’s REsearch Team. Its blog series includes a walkthrough detecting a remote code execution vulnerability in rsync.
Engineers can explore a framework and practical example for binary vulnerability research.
- SecurityArticle
Black-Box Security Analysis of Xiaomi’s MJA1 Secure Chip
Quarkslab describes a black-box analysis of Xiaomi’s MJA1 secure chip, covering hardware identification, I2C sniffing, flash dumping, and firmware reverse engineering. The work mapped its command protocol and assessed its security properties.
The analysis offers engineers concrete methods for examining undocumented secure hardware and its firmware.
- SecurityProject
ARM Exploitation CTF Updated Without Obvious Symbols
The exploit_me repository contains a vulnerable ARM/AARCH64 application for CTF-style exploitation practice, with 29 vulnerability techniques. The author says it was updated to remove obvious symbols for LLM fine-tuning.
Engineers can use it to explore ARM/AARCH64 exploitation techniques and experiment with LLM training.
Windows access tokens and kernel privilege escalation
The post describes the Windows kernel _TOKEN structure, which holds identity and security attributes for processes and threads. It explains that privilege-escalation exploits have historically gained SYSTEM privileges by replacing a process token.
Understanding tokens helps engineers reason about Windows access control and privilege-escalation risks.
- SecurityVideo
Lecture on linking, loading, and position-independent code
A lecture by Anton Burtsev of the University of California, Irvine, on linking and loading with position-independent code.
Position-independent code is relevant to engineers working with executable layout and security hardening.
- SecurityProject
Reversecore_MCP automates reverse engineering with AI agents
Reversecore_MCP is an MCP server for AI agents, powered by Radare2, YARA, LIEF, and Capstone. Its GitHub description lists reverse engineering, malware analysis, forensics, vulnerability research, and SAST.
It may help engineers evaluate an AI-assisted workflow for binary analysis and security research.
- SecurityProject
Reverse Engineering and Malware Analysis Roadmap
A GitHub roadmap for reverse engineering and malware analysis, covering x86/x64 assembly, static and dynamic analysis, anti-RE techniques, and tools such as Ghidra, IDA, and x64dbg.
It offers engineers a structured set of topics and tools to explore for reverse engineering and malware analysis.
- SecurityArticle
Riot announces Vanguard On-Demand
Riot announced Vanguard On-Demand, which the post says lets Vanguard run only while playing if Secure Boot, TPM 2.0, VBS, HVCI, and IOMMU are enabled. Riot’s blog is linked for details.
The change could reduce the need for an anti-cheat driver to run at startup while relying on hardware security features.
- SecurityProject
Post announces a bootrom exploit for several Apple chips
The post says a bootrom exploit for A12, A13, S4/S5, and untested A12X/Z devices has been released. It links to the usbliter8 repository and a project page.
Bootrom exploits can affect device security and are relevant to vulnerability research.
- SecurityArticle
Research Finds Cleartext Traffic on GEO Satellite Links
The linked article reports that a significant portion of GEO satellite traffic is transmitted in cleartext and can be intercepted with relatively affordable equipment.
Engineers operating satellite links should assess whether sensitive traffic is encrypted in transit.
- SecurityArticle
Autonomous Vulnerability Hunting with MCP
A ZephrSec article about using MCP for autonomous vulnerability hunting.
Useful to engineers exploring LLM-based approaches to vulnerability research.
- SecurityArticle
Surfshark introduces the Dausos VPN protocol
Surfshark describes Dausos as a new VPN protocol designed for speed, security, and efficiency. The post says it uses AEGIS-256X2.
Engineers evaluating VPN protocols can review Surfshark’s design and security claims.
- SecurityProject
CVE-Genie aims to automate exploit generation
The post describes CVE-Genie as a tool that turns known vulnerabilities into working exploits through a few API calls. Its linked GitHub page identifies the project but provides no further details in the preview.
If the claim holds, automated exploit generation could affect how teams assess vulnerability exposure and prioritize defenses.
- SecurityProject
Research Index on LLMs for Vulnerability Detection
A GitHub collection indexing research on using large language models for software vulnerability detection, including work at function and repository level and on agentic approaches.
Engineers can use it to find research on applying LLMs to vulnerability detection.
NIST argues for continuous monitoring and updates in AI security
A NIST article presents a mathematical proof supporting a continuous-monitor-and-update security model for AI systems.
It highlights an alternative to relying on static security controls for AI systems.
- SecurityArticle
Microsoft Research Explores Encrypted Collaborative Applications
Encrypted Spaces is a research project exploring an architecture for collaborative applications where data is encrypted and all operations are cryptographically verifiable.
The project offers security engineers an approach to building collaborative software with less reliance on trust in operators.
