News
- The State of Ransomware Q2 2026 - Ransomware activity remained high in Q2 2026, with more active groups, declining ransom payment rates, and increasingly rapid exploitation of newly disclosed vulnerabilities. And yeah, there is AI involved. 0day Fans
- The Evolving Role of the Red Team in the Era of Agentic Security - AI agents are changing the threat landscape, requiring Red Teams to adopt AI-driven techniques to simulate faster, more autonomous attacks... Google Security Blog
Techniques and Write-ups
- AMD DRAM Isolation Bypass: Compromising Protected CPU Memory - AMD’s DRAM address remapping can apparently be abused to bypass memory isolation, exposing protected regions that are supposed to be inaccessible, including areas used by the PSP/fTPM, SMM and even CPU microcode. The scary part: the attack works below the security mechanisms that are meant to protect these regions, making it potentially very difficult to fix. Christopher Domas @xoreaxeaxeax
New to Me and Miscellaneous
- Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack - Key Points Introduction Since early 2026, Check Point Research has tracked a wave of the Operation Dream Job campaign. This wave primarily targeted the defense sector worldwide, with a particular emphasis on companies operating in the aerospace and aviation … 0day Fans
- Web App Pentesting in the AI Era - The IncludeSec team explores the practical considerations of AI-assisted source code analysis. Observing results produced with frontier vs locally-hosted models, various harness orchestration designs, and a list of different language frameworks provided us … Include Security Research Blog
Techniques, tools, and exploits linked in this post are not reviewed for quality or safety. Do your own research and testing.