Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2025.06.21.md

The Single-Packet Shovel: Digging for Desync-Powered Request Tunnelling - https://www.assured.se/posts/the-single-packet-shovel-desync-powered-request-tunnelling

How to Kernel Debug With Windows Sandbox - https://blog.maxrenke.com/How-to-Kernel-Debug-With-Windows-Sandbox/

Track DB - https://worty.fr/post/writeups/fcsc2025/trackdb/

Finding SSRFs in Azure DevOps - https://binsec.no/posts/2025/01/finding-ssrfs-in-devops

Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangs - https://blog.talosintelligence.com/introducing-toymaker-an-initial-access-broker/

#informatyka