Intercepting Android WebView traffic under new certificate validity requirement by Chromium
In a recent security assessment, we were unable to intercept the traffic originating from a WebView from an Android application. The application wasn’t using certificate pinning, nor was it configured in any special way that would prevent normal interception. When testing that same application on a different device, the traffic could be intercepted directly, confirming…
Reducing Microsoft Sentinel Costs Without Compromising Detection – Part 2: The Firewall Quest
Firewall network traffic logs are the largest driver of Microsoft Sentinel ingestion costs. Yet they remain a critical source of…
The Road to Post-Quantum Readiness Part 2 of 2: The Migration Playbook
Post-Quantum Cryptography is no longer just about understanding the threat. The real challenge now is migration: deciding where to start,…
The Road to Post-Quantum Readiness Part 1 of 2: Understanding the Risk
Post-Quantum Cryptography is no longer a future-only concern. Standards are final, major providers have already deployed hybrid protection, and the…
Reducing Microsoft Sentinel Costs Without Compromising Detection – Part 1: The Summary Rules Quest
This blog is the first in a series exploring how Summary Rules, together with Auxiliary or Data Lake storage, can…
The Detection & Response Chronicles: Covert Operations Through QEMU
Adversaries have always relied on legitimate tools to carry out their attacks. These tools are already trusted by security solutions,…
Securing AI systems without overconfidence or fear – Part 2: Attack surfaces and the checkpoint flow
Part 1 explained how we have to bound behavior instead of asserting exact outputs. This post maps where to place…
Something went wrong. Please refresh the page and/or try again.