XZ Utils Backdoor (CVE-2024-3094): A Supply Chain Post-Mortem
A near-miss that would have put a backdoor in sshd across major Linux distributions, undone by a curious engineer noticing sshd was 500ms slower.
Vulnerability Research
MOVEit Transfer (CVE-2023-34362): From SQL Injection to Web Shell
How a pre-authentication SQL injection in a managed file transfer product became one of the largest data theft campaigns of 2023.
Spring4Shell (CVE-2022-22965): A Practical Exploitation Walkthrough
How Java Bean data binding turned into remote code execution on Spring MVC applications deployed as WAR files on Tomcat.
Log4Shell (CVE-2021-44228): Exploitation, Detection, and Mitigation
A week after disclosure, what we knew about the Log4j JNDI flaw, why the blast radius was so large, and how to find affected systems.
ProxyLogon (CVE-2021-26855): Dissecting the Exchange SSRF Chain
Notes on the four-vulnerability chain that let an unauthenticated attacker take over on-premises Exchange servers in early 2021.