Blog
Threat research, vulnerability breakdowns, and practical security guidance from Clear Infosec.
What you will find here
Threat Intelligence Bulletins
Weekly roundups of new CVEs, active exploits, and defensive guidance.
Case Studies
Real engagements and measurable outcomes from our security work.
White Papers
In-depth research and practical frameworks for security and compliance teams.
Blogs
Threat research, vulnerability breakdowns, and practical guidance.
-
Microsoft has sent a warning to millions of Windows 10, Windows 11 users.
A new zero-day exploit has been discovered that affects all versions of Windows. Microsoft has also confirmed that all versions of windows have critical…
-
Windows Server authentication issues triggered by new security upgrades
User Experience: “After installing the November security updates, you might have authentication failures on servers relating to Kerberos Tickets acquired via S4u2self,” Microsoft explains…
-
Zeek for pcap files
I have only used inbuilt scripts or commands, or tools in REMnux virtual machine in my previous blogs. So, this time I am going…
-
APT Used Commodity RATs to Take Advantage of a Geriatric Microsoft Bug – CVE-2017-11882
Threat actors are targeting entities in India and Afghanistan using malicious domains with political and government themes. A lone wolf threat actor is operating…
-
APT28 attack attempts against 14,000 Gmail users
On 6th, Google has warned about 14,000 Gmail users that they’ve been targets of Russian government sponsored APT28 phishing campaign. “We detected an APT28…
-
GriftHorse Android Trojan Stole Millions from 10 Million Users
More than 10 million Android users are being impacted by the new GriftHorse mobile virus. According to security experts, these typical premium service scams…
-
Phishing Email & attachment Analysis
We’re going to talk about how to address infected PDF files and extract malicious indicators from within them without endangering yourself or your PC.…
-
THM Walkthrough – Vulnversity Part 2
In this blog as promised last time we will compromise the webserver with Burp Suite. Task 4: Compromise the webserver I have tried uploading few…
-
Optimum – HackTheBox Walkthrough – Part 2
As we saw in the first part of this Optimum walkthrough, it is a beginner-level machine that is more of an enumeration of services…
-
THM Walkthrough – Vulnversity Part 1
I am back with my favorite type of blog which is walkthrough of THM machine. In this machine we will Learn about active recon,…