Here’s where we keep you up to date with the latest cyber security research, vulnerabilities, threats and solutions.
The era of cracked games taught us something: licensing was never just about payments. It was always about security. Working from a single trial account, the Zerotak team activated full enterprise functionality on a Microsoft Office Add-in without touching...
A SaaS platform with proper authentication, MFA enforced, and monitored infrastructure. None of it mattered. The technical team at Zerotak took over a user account without touching a single piece of software. We registered an email that looked almost identical to the...
Most cybercrime investigations do not start with a confession or a witness. They start with a fragment: a wallet address, a screenshot, a timestamp that may or may not be real, an IP that belonged to someone for forty minutes. The gap between that fragment and a named...
Your application passed the web pentest. Your infrastructure is patched. But you added an AI assistant to your platform six months ago, and nobody has tested it. That is the gap most security teams are not thinking about yet. In a recent engagement, Zerotak assessed...
When Generic Threat Intelligence Isn't Enough Not all cybersecurity challenges are created equal. A retail company managing phishing risks and a national defense agency operate in fundamentally different threat environments. The tools they use and the intelligence...
Throughout our investigation, we identified hard-coded C2 IP addresses embedded in Open Source Projects through multiple methods: 1. Exploits and Proof-of-Concept (PoC) code Several public PoCs included "hidden callbacks pointing to external servers, often without any...
Get in touch with one of our experts today to discuss your business needs.
