Purpleshift
Recent
Tenant isolation bypass in the cloud
Results of our penetration test of a major cloud provider
Breaching a warehouse: from scanners to robots
Threat model, attack vectors, and methods of protecting logistics centers
cups2root: privilege escalation without vulnerabilities
New LPE technique based on built-in mechanisms of CUPS
Roger: our new tool for pivoting
The utility allows a pentester to establish a stable tunnel
Attacks on warehouses and clouds: our talks at SAS 2026
Our pentesters will present two major studies
New actor: Citrus Ransomware Group
A Trusted Relationship is used as the initial attack vector
Attacks via GPO: no need for malware
How compromising group policies disrupted manufacturing operations
What we learned this spring: 1H 2026 digest
10 most popular PurpleShift posts from January to June
Labooboo backdoor: detailed analysis
Malware communicates with C2 via the Element messenger and the HiveMQ MQTT broker