Category: Hacking
-
Hardware Firmware Vulnerability Disclosure in 2026
Firmware disclosure in 2026 is a slower animal than software disclosure. The CVE drops, but the patch is months away, the affected devices are still in production, and someone has to decide who is going to coordinate the response across the device manufacturer, the integrator, the customer.
-
The Second Life of the Network Firewall in 2026
The network firewall the enterprise has been running for twenty years has been quietly developing a second life, the life the Zero Trust pitch has been promising to replace, the life the modern network the cloud architect has been building has been quietly relying on.
-
The Windows Print Spooler Was Just the Start in 2026
The Windows print spooler was the vulnerability the security community flagged as the canary, the vulnerability that proved the supply chain assumption the enterprise has been depending on was wrong.
-
Lateral Movement Without Exploits in 2026
Lateral movement without exploits in 2026 amounts to the dominant attack pattern in the typical enterprise breach. The attacker compromises one endpoint with a phishing email, the attacker uses the legitimate credentials the phishing email captured, the attacker moves to the next endpoint with the legitimate credentials, the attacker does not need a single exploit…
-
Attack Path Mapping: The Honest Guide
Attack path mapping runs as the discipline of drawing the route an attacker would actually take through the environment, then fixing the parts of the route that are stupid. The discipline has been overcomplicated by the vendors and underused by the practitioners. The honest version is the one that produces the fixes.
-
Hardware Firmware Extraction in 2026
The hardware firmware extraction in 2026 sits as the security research technique the attacker uses to find the vulnerabilities the defender does not know about. The attacker extracts the firmware from the device, the attacker analyses the firmware, the attacker finds the backdoor the manufacturer left, the attacker finds the hardcoded credential the developer forgot,…
-
Threat Hunting Without Budget in 2026
Threat hunting without a budget sounds like the impossible assignment, and it usually is. The teams that pull it off are not the ones that found a way to buy more tooling. They are the ones that figured out how to use what they already had, more carefully, with more discipline, with the hypothesis driven…
-
How Ransomware Negotiation Actually Works in 2026
Ransomware negotiation in 2026 runs as a structured process, not as the panicked back and forth the movies suggest. The negotiation has a beginning, a middle, and an end, with the professionals on both sides, with the rules the professionals follow, with the outcomes the professionals achieve. The 2026 guide to how ransomware negotiation actually…
-
The Zero Day Economy in 2026: The Prices, the Buyers, the Deals
The zero day economy in 2026 sits at a $2B annual market, up from $300M in 2020, with the prices for the most valuable exploits reaching seven figures per buyer. The state of the zero day economy in 2026 amounts to a market that has matured, professionalised, and consolidated into a few large players.
-
When Bug Bounties Pay and When They Are Marketing
A field guide to the bug bounty in 2026, with when the bug bounty actually pays for itself, when the bug bounty is pure marketing, and the indicators that tell you which one you are running.