Most security labs are built around predictable, well-documented vulnerabilities. But every once in a while, during experimentation, you…

Cracking open the rewards admin panel.

X.509 Certificate Extractor (TLS over TCP and DTLS) Introduction Release 4.0 introduces a new capability: the scanning of TCP and UDP streams for x.509 certificates. You can now either export these certificates to disk or dissect their attributes and output…

Root cause analysis for N-able N-central CVE-2025-9163 and CVE-2025-11700 which allow for reading files and and potentially compromising the N-central database which stores client credentials, API keys, and more.

elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.

Oligo Security uncovers ShadowRay 2.0, an active global campaign exploiting Ray to hijack AI infrastructure and create a self-propagating botnet.

The Windows Error Reporting is a feature that is responsible for the collection of information about system and application crashes and reporting this information to Microsoft. Windows are shipped …

Threat actor "888" claims LG Electronics data leak with source code and credentials exposed. Analysis and security recommendations.

This article dives deep into the emerging threat of covert audio‑and‑video exfiltration hidden inside seemingly harmless PDF attachments and lightweight Python noscripts. It explains how attackers embed microphone listeners, webcam recorders, and motion‑triggered…

We hacked our way into Lovable's office by demoing SupaPwn — a chain that could potentially enable region-wide tenant takeover: event-trigger privilege window, DB superuser, host RCE, SUID escalation, exposed configs, orchestration takeover

IP, Prefix, Asn, isp denoscription, BGP Routes, BGP HiJack Search. All data comes from RouteViews and Ripe

Bypassing a PHP stream wrapper blacklist

Lite XL versions 2.1.8 and earlier contain vulnerabilities that allow arbitrary code execution and can lead to Remote Code Execution.

Intro Earlier this year, in January, Oracle Cloud's login service (login.us2.oraclecloud.com) was breached—this led to the compromise of 6M records and over 140k Oracle Cloud tenants. Analysis showed that the threat actor had exploited an older CVE (CVE-2021…

On November 18, 2025, the digital world was shaken by an unexpected incident the Cloudflare outage. Cloudflare, one of the largest Content Delivery Networks (CDNs) in the world, suffered a major service disruption that impacted millions of websites and applications…

We discovered a remote code execution vulnerability in Microsoft's Update Health Tools (KB4023057) through an abandoned Azure Blob. Here’s how we found it, how it worked, and what it means for your Windows environment.

Unquoted paths (CWE-428) remain a hidden threat in today’s software. See how runtime visibility exposes what legacy vulnerability tools overlook

In 2022, a subtle XSS bug slipped into esbuild, one of the most widely used JavaScript bundlers on the planet. Despite billions of downloads, it remained unnoticed, hiding inside a function that appeared to safely escape HTML. But a missing quote escape created…