Netcrook
Research, Exploits & Offensive Security / Europe
Forensic Software Is Not a Verdict Engine: What the Garlasco Debate Really Exposes
Advanced forensic tools can accelerate review of old evidence, but they do not turn data into certainty without method, context, and human judgment.
Ghost Frames Turns the Endpoint’s Own Memory of Itself Into the Weak Link
A reported call-stack manipulation technique puts a rare kind of pressure on EDR: if the stack can be made to look normal, one of its best context signals can become less useful.
When Repeated Pentests Start Looking Too Polished
A webinar tied to Picus Security spotlights a familiar trap in defensive testing: when automated pentest runs keep looking stable, teams may mistake fewer findings for lower risk.
The Hardware Layer That Security Teams Do Not Fully See
A Rome conference talk turned POTÆbox into a reminder that some threats are framed not as software flaws, but as device-layer risks that may sit outside normal monitoring.
Notepad++ and the Hidden Risk of Trusted Files
Public proof-of-concept code for three patched Notepad++ flaws turns a familiar Windows editor into a reminder that local trust boundaries can be just as dangerous as remote ones.
Public PoC Turns a Patched 7-Zip Flaw Into a Version-Tracking Problem
A fixed memory-corruption issue in 7-Zip now has public exploit material, shifting the urgent question from whether it can be studied to where older copies still remain in use.
AI in the Evidence Room: Why Plausible Output Is Not Proof
A conference talk in Rome turned generative AI into a forensic problem: useful for analysis, but only defensible when its steps are auditable, reproducible, and tied to preserved evidence.
Berlin’s Exploit Arena Shows Where the Next Security Breakpoints Are Forming
Pwn2Own Berlin 2026 turned successful exploit demonstrations into a $1.3 million signal about where defenders should expect pressure next: operating systems, hypervisors, NVIDIA tooling, and AI-related software.
Berlin’s Bug Hunt Showed How Thin Modern Defenses Can Be
A sanctioned exploit contest in Berlin turned browser sandboxes, Windows privilege boundaries, Linux workstations, container runtimes, and AI tools into a live stress test for today’s security architecture.
Exim PoC Exposes the Hidden Risk of a “Fixed” Mail Server Bug
A public proof of concept for CVE-2026-45185 is a reminder that the real exposure of an MTA can depend on build flags, TLS backend choice, and whether the vulnerable code path is actually reachable.
When the Vulnerability Arena Fills Up, the Exploits Spill Out
A crowded Pwn2Own Berlin 2026 appears to have pushed some researchers toward public zero-day releases, raising fresh questions about browser risk, vendor response, and the expanding attack surface around AI tooling.