Deepresearch
Long-form technical explainers. The protocols that never got security right, the markets that trade exploits, the attacks that rebuilt TLS.
Explainers that go to the mechanism - DNS, BGP, TLS history, the zero-day market - the layer other coverage skips.
The track log
what's on fileField reports
12 in this track // newest firstDNS Security: Cache Poisoning, Nation-State Hijacking, and the Protocol That Never Got Security Right
DNS was designed in 1983 before security was a requirement. The Kaminsky attack in 2008 demonstrated cache poisoning…
Open report →npm, PyPI, and the Package Manager Attack Surface: How Malicious Code Reaches Millions of Developers
From the left-pad incident that brought down thousands of builds to the event-stream Bitcoin theft targeting Copay,…
Open report →The Juniper Backdoor: How the NSA's Cryptographic Weakness Was Repurposed by a Foreign Adversary
In 2015, Juniper Networks discovered unauthorized code in its VPN firmware that had been present since 2012 - a…
Open report →BGP Hijacking: The Protocol Flaw That Lets Anyone Reroute the Internet
Border Gateway Protocol holds the internet together with nothing but trust. A network that announces it can reach an…
Open report →The Zero-Day Market: Zerodium, Government Buyers, and the Economics of Undisclosed Vulnerabilities
Zerodium pays $2.5 million for a full-chain iOS exploit. The NSA spent hundreds of millions annually buying…
Open report →ML Phishing Detection: What the Published Research Actually Shows
A summary of published academic surveys on ML-based phishing detection: benchmark accuracy near 99 percent, a…
Open report →Writing Effective Sigma Rules for LOLBin Detection in Production SIEMs
Sigma is the standard for portable SIEM detection rules. This guide covers writing robust Sigma rules for LOLBin…
Open report →BEAST, POODLE, FREAK, DROWN, ROBOT: How a Decade of Attacks Built TLS 1.3
SSL 3.0 was 18 years old when POODLE killed it. During those 18 years, every failed cipher suite, every lax padding…
Open report →WEP, WPA, KRACK, and Dragonblood: How Wi-Fi Security Broke and Rebuilt Itself
WEP was broken four years after publication. WPA-TKIP fell to a chopchop attack. WPA2's handshake was captured…
Open report →Social Engineering and Pretexting: The Attack Surface Security Training Can't Fix
Social engineering isn't a bypass for security - it is the attack surface security most consistently fails. From the…
Open report →SQL Injection: 25 Years on OWASP's Top 10, From CardSystems to MOVEit
SQL injection was documented in 1998 and has been in OWASP's Top 10 every year since. It powered the CardSystems…
Open report →Cellebrite UFED: The Mobile Extraction Tool Used by 100+ Countries and Its Security Implications
Cellebrite's UFED extracts data from locked, encrypted phones by exploiting iOS and Android vulnerabilities that are…
Open report →Track console
shell // guest sessionTry help, random, latest, grep <term>, or count.