Technical research, conference talks and deep-dive analyses from SecCore's offensive security experts on penetration testing, red teaming and Active Directory security.

Prescribing Security: Uncovering 5 CVEs in a Healthcare Application

This blog post describes the technical details behind CVE-2026-0856, CVE-2026-0857, CVE-2026-22314, CVE-2026-22315 and CVE-2026-25602

NTLM-Relaying in 2026

NTLM-Relaying is a common attack vector in internal networks. In this blog post, we will show that even in 2026, there are still many scenarios where NTLM-Relaying can be successfully performed, and we will provide some insights into how to mitigate these risks.

AI agents are everywhere, how good is that really?

There is no doubt that GenAI has already disrupted many industries and workflows. However, just like any technology, between the hype and promises, there are risks that do not get the attention they deserve.

Unconventional Initial Access Vectors Pt. 3

Mitigation and defense strategies.

Unconventional Initial Access Vectors Pt. 2

Elaborating on Conditional Access bypasses and what happens after initial access is established.

Unconventional Initial Access Vectors Pt. 1

ITSecX 2025 was a great time again. For everyone who could not make it, we want to summarize our experiences and our talk.