Netcrook
Research, Exploits & Offensive Security / Asia
Kimi K3 and the Redis Puzzle: What a 27-Minute RCE Hunt Really Suggests
A reported Redis vulnerability hunt by Moonshot AI's Kimi K3 points to a harder question for defenders: how quickly can agentic AI turn software behavior into a reproducible exploit hypothesis?
When an Air Gap Starts Whispering: TrojPix Turns Video Cables into a Leak Path
A research demonstration shows that once malware is already inside an isolated machine, imperceptible pixel changes can create radio emissions that a nearby receiver can decode.
When Storage Tools Turn Into Privilege Shortcuts
Three high-severity Windows CVEs in AOMEI products put kernel drivers, local access, and SYSTEM-level risk in the same frame.
When a Partition Tool Crosses the Line: Two High-Severity Bugs Put Privilege Boundaries at Risk
Public proof-of-concept material for EaseUS Partition Master 14.5 has turned a routine storage utility into a live reminder that software handling disk operations can carry security consequences far beyond the desktop.
When a Fitness Band Becomes a Firmware Lab
A close look at the Mi Band 10 shows why wearables with app links and embedded silicon attract reverse-engineers: the real story is not the screen, but the software chain underneath.
The Quiet Economics of Hacking: How a Bug Bounty Story Became a Security Signal
A profile of Isira Adithya is a reminder that vulnerability research is not just technical curiosity - in some cases, it can become a practical career path with real-world financial impact.
When a Guitar Amp Starts Looking Like an Embedded Target
A Yamaha THR10c turns a service manual clue and a JTAG header into a reminder that consumer audio gear can carry the same debug risk as larger embedded systems.
Pwn2Own Berlin Turns 47 Zero-Days Into a Map of Tomorrow’s Attack Surface
The contest payout is a headline number, but the real signal is where skilled researchers still found fresh cracks in fully patched software.