Resecurity, Monday, June 29th, 2026
Reconnaissance in the Age of AI: Exploring Modern ML Infrastructure
Resecurity details how attackers map and target modern AI/ML infrastructure that traditional recon overlooks.
more →
Back Issues This Week → Popular →
All issues › Archive
Resecurity — Archive
8 articles
Resecurity, Thursday, June 11th, 2026
The Anubis Ransomware Attack on the Adriatic Port Authority
Resecurity details the Anubis ransomware attack that crippled an Adriatic port authority.
more →
Resecurity, Friday, March 6th, 2026
Inside Tycoon 2FA: Disrupting A Global Phishing Operation
Resecurity is proud to contribute to disrupting of Tycoon 2FA, a cybercriminal platform that generated more than 30 million bogus emails in a single month. The joint effort, led by Microsoft, Europol, and other industry partners, aimed to target its infrastructure responsible for tens of millions of fraudulent emails reaching over 500,000 organizations each month worldwide.
more →
Resecurity, Friday, February 6th, 2026
Clawdbot / Moltbot: The Autonomous AI Butler That Could Expose Your Entire Digital Life
Clawdbot (recently rebranded as Moltbot) is part of a new wave of autonomous AI agents designed to move beyond passive conversation and into direct action. Unlike traditional AI chatbots that merely respond to prompts, Clawdbot can operate your system, control browsers, send messages, and execute workflows on your behalf. While this level of automation is powerful and appealing, it introduces a fundamentally different threat model.
more → Resecurity, October 3,2025
ShinyHunters Launches Data Leak Site: Trinity of Chaos Announces New Ransomware Victims
The Trinity of Chaos, a ransomware collective presumably associated with Lapsus$, Scattered Spider, and ShinyHunters groups, launched a Data Leak Site (DLS) on the TOR network containing 39 companies impacted by the attacks.
more → Resecurity, Wednesday, August 6th, 2025
SSRF to AWS Metadata Exposure: How Attackers Steal Cloud Credentials
In modern cloud environments, misconfigurations and insecure coding practices can open dangerous doors to attackers. One critical example is Server-Side Request Forgery (SSRF), a vulnerability that allows attackers to manipulate a server into making unintended requests.
more → Resecurity, Friday, August 1st, 2025
Sharepoint Zero-Day Exploit (Toolshell) - Network Infrastructure Mapping
As reported by ISMG, nearly 150 different organizations' on-premises SharePoint servers have been exploited by attackers targeting the zero-day vulnerabilities now tracked as ToolShell. Early attacks have been attributed to China-linked groups, in some cases leading to Warlock ransomware infections.
more → Resecurity, Friday, July 25th, 2025
Methods to Bypass OTP in Mobile Apps: Successful VAPT Scenarios
Resecurity conducted hundreds of VAPT (Vulnerability Assessment and Penetration Testing) engagements for customers of different sizes and profiles-ranging from Fortune 100 corporations to emerging start-ups looking to test their cybersecurity controls before going live. Interestingly enough, regardless of the maturity of the company, issues related to API and authorization were identified in many cases, especially when the application had been developed by a third party.
more →