Crisis meeting with a managing director and his accountant “watchdog”. We are in his meeting room, his territory in a mid-sized company. The situation is tense, facts no longer matter. My counterpart’s decision-making style has long been shaped by a lack of governance. As in a close-quarter firefight, the tone becomes louder, more forceful. Not out of clarity or determination, but clearly with the intention to dominate. All signs are set to escalation. Read more

Many PoCs appear as textfiles with references to company websites or blogs. Reverse engineer Axel Souchet publishes his PoCs in a way I find more convenient and much better: As a git repository. Here his latest release on CVE-2021-28476 from a few hours ago, how via RCE a guest can breakout of a HyperV environment1. The further course of a publication is not less exciting, if to be learned and understood. And there are always questions or additions to something. As an example in the screenshot below the commits of an older PoC to CVE-2019-9810 from last year2. Read more