How a Single Link Could Steal Your Telegram Desktop Session
Telegram Desktop before 7.2.9 passed clicked links to its running instance without escaping a separator character, letting a crafted link sm...
Oct 10, 2026
8 min
Operation Endgame Disrupted 326 Servers. The StealC Backend I Reported Still Responds.
Operation Endgame disrupted 326 servers and 142 domains. Three months after disclosure, the StealC malware routes I documented still respond...
Sep 21, 2026
11 min
Attackers Passed DKIM and Hit 67,000 Inboxes in 3 Hours. We Scanned 666,803 Domains to See Why DMARC Didn't Stop Them
Microsoft's Q2 2026 report shows attackers passing DKIM at scale — 67,000 inboxes hit in 3 hours via Amazon SES. A daily scan of 666,803 Tra...