How we mapped a multi-entity fraud network, parsed financial statements, identified victims, and delivered a court-ready …
A Baysec advisory with root-cause analysis of four critical n8n RCE flaws: Ni8mare (CVE-2026-21858, …
Analysis of CVE-2025-14847 (MongoBleed), a pre-auth memory disclosure vulnerability in MongoDB, …
December 2025 threat intelligence - ransomware landscape, Poland-focused analysis, dark web …
A Baysec Intelligence Centre report on how Sweden's cyber threat landscape has changed since its …
January 2026 marked one of the most intense periods of hybrid warfare, with coordinated cyber …
A brief overview of geopolitical and cyber events targeting Venezuela before and after U.S. …
Abusing TIOCSTI to manipulate process file descriptors and execute arbitrary commands.
Exploiting the Active Directory environment and compromising the domain controller.
Finding a way into the internal infrastructure. Prototype pollution, popping shells, for fun, and …
What happens when you run scripts without checking the contents properly?
This article will explain some of the common HTTP state interception methods.
Final part three of the Hello Security series dedicated to extend cyber-security awareness, …
Part two of the Hello Security series dedicated to extend cyber-security awareness, performed at …
Part one of the Hello Security series dedicated to extend cyber-security awareness, performed at …
How we mapped a multi-entity fraud network, parsed financial statements, identified victims, and delivered a court-ready intelligence package.
A Baysec Intelligence Centre report on how Sweden's cyber threat landscape has changed since its March 2024 NATO accession, covering state-sponsored …
January 2026 marked one of the most intense periods of hybrid warfare, with coordinated cyber operations targeting Poland, highlighting the growing …
A Baysec advisory with root-cause analysis of four critical n8n RCE flaws: Ni8mare (CVE-2026-21858, unauthenticated webhook takeover), Expression …
A brief overview of geopolitical and cyber events targeting Venezuela before and after U.S. intervention in January 2026.
Analysis of CVE-2025-14847 (MongoBleed), a pre-auth memory disclosure vulnerability in MongoDB, including technical details, threat activity, and …
