Jan 12 2026 Last Week in Security (LWiS) - 2026-01-12

SmarterMail Pre-auth RCE (@chudyPB + @SinSinology), Claude Code code execution (@ryotkak), VSS create (@RicardoJoseRF ), EDRStartupHinder (@TwoSevenOneT), and more!

Jan 05 2026 Last Week in Security (LWiS) - 2026-01-05

Windows ARM64 internals (@33y0re), VEH^2 PoC (@0xfluxsec), macOS 26 TCC bypass (@patch1t), BOFs with Crystal Palace (@_RastaMouse), Flare-On 2025 write-ups (@washi_dev), and more!

Dec 15 2025 Last Week in Security (LWiS) - 2025-12-15

Moonwalk++ stack telemetry bypass (@KlezVirus), a pile of Mediatek CVEs (@hyprdude), AppleScript decompiler (@__pberba__), SCOM hacking (@unsigned_sh0rt + @breakfix), .NET SOAP disaster (@chudyPB), and more!

Dec 08 2025 Last Week in Security (LWiS) - 2025-12-08

SCOM lab (@synzack21), WatchGuard RCE (@_mccaulay), Clickjacking with SVGs (@rebane2001), macOS LPE (@theevilbit), a new private phone company (@nickcalyx + @phreeli), Proxmox tradecraft (@ZephrFish) and more!

Dec 02 2025 Last Week in Security (LWiS) - 2025-12-02

Two weeks of news, techniques, tools, exploits, and more!

Nov 18 2025 Last Week in Security (LWiS) - 2025-11-18

Cloudflare takes down the internet, IDA Pro gets a TUI, Rust in Android, AI-orchestrated cyber espionage, and more!

Nov 10 2025 Last Week in Security (LWiS) - 2025-11-10

Apple's sourcemaps takedown (@moeruri), Call stack sig bypass (@saerxcit), AD Site pwnage (@croco_byte), sneaky remap (@MagisterQuis), Deceptiq launch (@deceptiq_), and more!

Nov 03 2025 Last Week in Security (LWiS) - 2025-11-03

ShareHound (@podalirius_), Conquest C2 (@virtualloc), Docker Compose path traversal (@RonMasas), dead domain discovery (@_lauritz_), Narrator persistence/lat movement (@Oddvarmoe ), Windows 11 LPE (@d4m0n_8), and more!

Oct 27 2025 Last Week in Security (LWiS) - 2025-10-27

DumpGuard (@bytewreck), GCC + VSCode (@_winterknife_), COM Research (@bohops), Gitlab to Cloud pivot (@0xC0rnbread), function peekaboo (@saab_sec), and more!

Oct 20 2025 Last Week in Security (LWiS) - 2025-10-20

WhatchGuard RCE (@_mccaulay), BadSuccessor BOF (@_logangoins), ClubWPT hack (@samwcyo), MDE cloud vulns (@p0w1_), and more!