Five novel vulnerabilities (4 post-auth RCE, 1 XSS) discovered across dozens of AvTech camera and DVR models — CVE-2025-57198 through CVE-2025-57202.

Technical analysis of the first stage of WhisperGate, the MBR-wiping pseudo-ransomware deployed against Ukrainian targets in January 2022.

Reverse engineering Rensenware, a piece of ransomware that demands you score 200 million on Touhou Lunatic mode — and writing a small program to trick it into decrypting your files.