# Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass) Well, well, well – look what we’re back with. You may recall that merely two weeks ago, we analyzed CVE-2025-52691 – a pre-auth RCE vulnerability in the SmarterTools SmarterMail email solution with a timeline that is typically reserved for […]

**security-research** Public # Python Wheel (Zip) Parser Differential Vulnerability v2.0 ## Package ## Affected versions ## Patched versions ## Description ### Summary It is still possible (albeit with significantly more effort) to upload a specially crafted Wheel file (i.e. zip) to PyPI that when installed with PIP (or another Python […]

# Intercepting OkHttp at Runtime With Frida – A Practical Guide 22 Jan 2026 – Posted by Szymon Drosdzol ### Introduction OkHttp is the defacto standard HTTP client library for the Android ecosystem. It is therefore crucial for a security analyst to be able to dynamically eavesdrop the traffic generated […]

When we first encountered VoidLink, we were struck by its level of maturity, high functionality, efficient architecture, and flexible, dynamic operating model. Employing technologies like eBPF and LKM rootkits and dedicated modules for cloud enumeration and post-exploitation in container environments, this unusual piece of malware seemed to be a larger […]

This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data. You can email the site owner […]

This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data. You can email the site owner […]

This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data. You can email the site owner […]

Windows has supported computer telephony integration for decades, providing applications with the ability to manage phone devices, lines, and calls. While modern deployments increasingly rely on cloud-based telephony solutions, classic telephony services remain available out of the box in Windows and continue to be used in specialized environments. As a […]

Recently I ran an experiment where I built agents on top of Opus 4.5 and GPT-5.2 and then challenged them to write exploits for a zeroday vulnerability in the QuickJS Javascript interpreter. I added a variety of modern exploit mitigations, various constraints (like assuming an unknown heap starting state, or […]

# Windows Internals: Check Your Privilege – The Curious Case of ETW’s SecurityTrace Flag > This blog post is from the original post I made on the Origin (by Prelude) blog. The original can be found here. ## Introduction Recently, while investigating new feature development for our Origin (by Prelude) […]