https://nefariousplan.com Security research by Kevlar en-us https://nefariousplan.com/posts/redsun-windows-defender-system-write https://nefariousplan.com/posts/redsun-windows-defender-system-write Thu, 16 Apr 2026 00:00:00 GMT https://nefariousplan.com/posts/the-trust-inversion https://nefariousplan.com/posts/the-trust-inversion Thu, 16 Apr 2026 00:00:00 GMT https://nefariousplan.com/posts/sap-netweaver-cvss-10-upload-to-webroot https://nefariousplan.com/posts/sap-netweaver-cvss-10-upload-to-webroot Sat, 11 Apr 2026 00:00:00 GMT https://nefariousplan.com/posts/axios-sapphire-sleet-70-million-installs https://nefariousplan.com/posts/axios-sapphire-sleet-70-million-installs Wed, 01 Apr 2026 00:00:00 GMT https://nefariousplan.com/posts/teampcp-they-came-for-the-scanners https://nefariousplan.com/posts/teampcp-they-came-for-the-scanners Mon, 30 Mar 2026 00:00:00 GMT https://nefariousplan.com/posts/oracle-cloud-the-breach-they-technically-didnt-deny https://nefariousplan.com/posts/oracle-cloud-the-breach-they-technically-didnt-deny Thu, 26 Mar 2026 00:00:00 GMT https://nefariousplan.com/posts/prompt-injection-is-a-supply-chain-attack https://nefariousplan.com/posts/prompt-injection-is-a-supply-chain-attack Wed, 18 Feb 2026 00:00:00 GMT https://nefariousplan.com/posts/mcp-servers-the-new-npm-left-pad https://nefariousplan.com/posts/mcp-servers-the-new-npm-left-pad Wed, 28 Jan 2026 00:00:00 GMT https://nefariousplan.com/posts/shai-hulud-the-npm-worm https://nefariousplan.com/posts/shai-hulud-the-npm-worm Mon, 15 Sep 2025 00:00:00 GMT https://nefariousplan.com/posts/xrpl-npm-the-official-package-was-the-threat https://nefariousplan.com/posts/xrpl-npm-the-official-package-was-the-threat Fri, 25 Apr 2025 00:00:00 GMT https://nefariousplan.com/posts/clfs-ransomwares-favorite-kernel-driver https://nefariousplan.com/posts/clfs-ransomwares-favorite-kernel-driver Thu, 24 Apr 2025 00:00:00 GMT https://nefariousplan.com/posts/crushftp-pre-auth-mft-is-the-target https://nefariousplan.com/posts/crushftp-pre-auth-mft-is-the-target Sat, 29 Mar 2025 00:00:00 GMT https://nefariousplan.com/posts/tj-actions-mutable-tags-were-always-a-lie https://nefariousplan.com/posts/tj-actions-mutable-tags-were-always-a-lie Sat, 15 Mar 2025 00:00:00 GMT https://nefariousplan.com/posts/bybit-safe-ui-poisoning-fifteen-hundred-million https://nefariousplan.com/posts/bybit-safe-ui-poisoning-fifteen-hundred-million Sun, 23 Feb 2025 00:00:00 GMT https://nefariousplan.com/posts/ivanti-the-vulnerability-subscription https://nefariousplan.com/posts/ivanti-the-vulnerability-subscription Fri, 17 Jan 2025 00:00:00 GMT