Purpleshift

Fake RPC server can impersonate the security context of the calling client, up to SYSTEM

We found a vulnerabilty in a popular LLM agent

An attacker can take over the domain if automatic client push installation is enabled on the server

Previously, pentesting tools did not work with 802.11r hashes

A technique much simpler than rootkit can make a malicious process invisible

Combining MDR and IR statistics provides a better understanding of current and emerging threats

Overly autonomous LLM executes commands not requested by the user

If Exchange ActiveSync requires security policy agreement, PEAS still works

How our MDR team investigated a Brazilian hacker attack on Mexico