RESEARCH BLOG

We are security experts and strive to be at the cutting edge

This blog features insights from our technical research, where we look at critical systems and highlight key security issues.

FEATURED

Heading

Achieving Telerik Remote Code Execution 100 Times Faster

A cryptographic vulnerability in the development software Telerik UI from 2017 turned out to be impractical to exploit until now. This blogpost details the optimization techniques deployed, which can be applied to similar issues in other software.
Read more...

NEW

Incorrectly patched ZyXEL vulnerability becomes zero-day again

We dug deeper into the vulnerability and patch for CVE-2020-9054, a pre-auth command injection in ZyXEL NAS devices. We found that the patched vulnerability was still exploit-able due to incomplete patching.
Read more...

NEW

A decade of hacking – meet the people behind SRLabs

It almost seems like eons ago when we were just some geeks having fun solving tech puzzles. We were discovering flaws in systems that we used every day. From this research, we soon realized it would be a bigger benefit for everybody ...
Read more...

NEW

The Android patch ecosystem – Still fragmented, but improving

Since 2018, SRLabs has refined Android patch analysis through the app SnoopSnitch [1]. Recent SnoopSnitch data paints an improved picture of the Android ecosystem over what we saw in 2018 [2].
Read more...
Loading more articles...