https://defion.security/feeds/en/research.xml 2025-07-21T12:00:00Z DEFION Security website DEFION Research Labs blends cutting-edge security research with real-time threat intelligence to stay ahead of modern adversaries. Our mission goes beyond technology: we actively contribute to societal security through public–private collaboration, ensuring our insights deliver real-world impact. DEFION Research Labshttps://defion.security/en/research-labs/ https://defion.security/en/research-labs/ruckus-unleashed-multiple-vulnerabilities-exploited/ 2025-07-21T12:00:00Z 2025-07-21T12:00:00Z

Ruckus Unleashed: Multiple vulnerabilities exploited

DEFION Research Labs https://defion.security/en/research-labs/pwn2own-automotive-2024-hacking-the-autel-maxicharger/ 2024-09-05T12:00:00Z 2024-09-05T12:00:00Z

Pwn2Own Automotive 2024: Hacking the Autel MaxiCharger

DEFION Research Labs https://defion.security/en/research-labs/pwn2own-automotive-2024-hacking-the-juicebox-40/ 2024-08-29T12:00:00Z 2024-08-29T12:00:00Z

Pwn2Own Automotive 2024: Hacking the JuiceBox 40

DEFION Research Labs https://defion.security/en/research-labs/pwn2own-automotive-2024-hacking-the-chargepoint-home-flex-and-their-cloud/ 2024-08-08T12:00:00Z 2024-08-08T12:00:00Z

Pwn2Own Automotive 2024: Hacking the ChargePoint Home Flex (and their cloud...)

DEFION Research Labs https://defion.security/en/research-labs/donex-darkrace-ransomware-decryptor/ 2024-07-25T12:00:00Z 2024-07-25T12:00:00Z

DoNex/DarkRace Ransomware Decryptor

DEFION Research Labs https://defion.security/en/research-labs/cve-2024-20693-windows-cached-code-signature-manipulation/ 2024-06-14T12:00:00Z 2024-06-14T12:00:00Z

CVE-2024-20693: Windows cached code signature manipulation

DEFION Research Labs https://defion.security/en/research-labs/bringing-process-injection-into-view-s-exploiting-all-macos-apps-using-nib-files/ 2024-04-05T12:00:00Z 2024-04-05T12:00:00Z

Bringing process injection into view(s): exploiting all macOS apps using nib files

DEFION Research Labs https://defion.security/en/research-labs/don-t-talk-all-at-once-elevating-privileges-on-macos-by-audit-token-spoofing/ 2023-10-13T12:00:00Z 2023-10-13T12:00:00Z

Don't Talk All at Once! Elevating Privileges on macOS by Audit Token Spoofing

DEFION Research Labs https://defion.security/en/research-labs/getting-system-on-windows-in-style/ 2023-09-28T12:00:00Z 2023-09-28T12:00:00Z

Getting SYSTEM on Windows in style

DEFION Research Labs https://defion.security/en/research-labs/technical-analysis-of-the-genesis-market/ 2023-04-05T12:00:00Z 2023-04-05T12:00:00Z

Technical analysis of the Genesis Market

DEFION Research Labs https://defion.security/en/research-labs/bad-things-come-in-large-packages-pkg-signature-verification-bypass-on-macos/ 2023-01-13T12:00:00Z 2023-01-13T12:00:00Z

Bad things come in large packages: .pkg signature verification bypass on macOS

DEFION Research Labs https://defion.security/en/research-labs/pwn2own-miami-2022-iconics-genesis64-arbitrary-code-execution/ 2022-10-17T12:00:00Z 2022-10-17T12:00:00Z

Pwn2Own Miami 2022: ICONICS GENESIS64 Arbitrary Code Execution

DEFION Research Labs https://defion.security/en/research-labs/pwn2own-miami-2022-unified-automation-c-demo-server-dos/ 2022-09-14T12:00:00Z 2022-09-14T12:00:00Z

Pwn2Own Miami 2022: Unified Automation C++ Demo Server DoS

DEFION Research Labs https://defion.security/en/research-labs/pwn2own-miami-2022-aveva-edge-arbitrary-code-execution/ 2022-09-08T12:00:00Z 2022-09-08T12:00:00Z

Pwn2Own Miami 2022: AVEVA Edge Arbitrary Code Execution

DEFION Research Labs https://defion.security/en/research-labs/process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/ 2022-08-12T12:00:00Z 2022-08-12T12:00:00Z

Process injection: breaking all macOS security layers with a single vulnerability

DEFION Research Labs https://defion.security/en/research-labs/pwn2own-miami-2022-inductive-automation-ignition-remote-code-execution/ 2022-07-22T12:00:00Z 2022-07-22T12:00:00Z

Pwn2Own Miami 2022: Inductive Automation Ignition Remote Code Execution

DEFION Research Labs https://defion.security/en/research-labs/pwn2own-miami-2022-opc-ua-net-standard-trusted-application-check-bypass/ 2022-07-19T12:00:00Z 2022-07-19T12:00:00Z

Pwn2Own Miami 2022: OPC UA .NET Standard Trusted Application Check Bypass

DEFION Research Labs https://defion.security/en/research-labs/coronacheck-app-tls-certificate-vulnerabilities/ 2022-02-03T12:00:00Z 2022-02-03T12:00:00Z

CoronaCheck App TLS certificate vulnerabilities

DEFION Research Labs https://defion.security/en/research-labs/xenserver-path-traversal-leading-to-authentication-bypass/ 2022-01-01T12:00:00Z 2022-01-01T12:00:00Z

Xenserver Path Traversal Leading To Authentication Bypass

DEFION Research Labs https://defion.security/en/research-labs/sandbox-escape-privilege-escalation-in-storeprivilegedtaskservice/ 2021-12-21T12:00:00Z 2021-12-21T12:00:00Z

Sandbox escape + privilege escalation in StorePrivilegedTaskService

DEFION Research Labs https://defion.security/en/research-labs/proctorio-chrome-extension-universal-cross-site-scripting/ 2021-12-14T12:00:00Z 2021-12-14T12:00:00Z

Proctorio Chrome extension Universal Cross-Site Scripting

DEFION Research Labs https://defion.security/en/research-labs/zoom-rce-from-pwn2own-2021/ 2021-08-23T12:00:00Z 2021-08-23T12:00:00Z

Zoom RCE from Pwn2Own 2021

DEFION Research Labs https://defion.security/en/research-labs/ios-vpn-support-3-different-bugs/ 2020-10-07T12:00:00Z 2020-10-07T12:00:00Z

iOS VPN support: 3 different bugs

DEFION Research Labs https://defion.security/en/research-labs/sign-in-with-apple-authentication-bypass/ 2020-07-01T12:00:00Z 2020-07-01T12:00:00Z

Sign in with Apple - authentication bypass

DEFION Research Labs https://defion.security/en/research-labs/jenkins-authentication-bypass/ 2020-01-30T12:00:00Z 2020-01-30T12:00:00Z

Jenkins - authentication bypass

DEFION Research Labs https://defion.security/en/research-labs/dns-rebinding-for-https/ 2019-11-25T12:00:00Z 2019-11-25T12:00:00Z

DNS rebinding for HTTPS

DEFION Research Labs https://defion.security/en/research-labs/spring-security-insufficient-cryptographic-randomness/ 2019-07-04T12:00:00Z 2019-07-04T12:00:00Z

Spring Security - insufficient cryptographic randomness

DEFION Research Labs https://defion.security/en/research-labs/volkswagen-auto-group-mib-infotainment-system-unauthenticated-remote-code-execution-as-root/ 2018-07-19T12:00:00Z 2018-07-19T12:00:00Z

Volkswagen Auto Group MIB infotainment system - unauthenticated remote code execution as root

DEFION Research Labs https://defion.security/en/research-labs/napalm-command-execution-on-naplm-controller-from-host/ 2017-07-12T12:00:00Z 2017-07-12T12:00:00Z

NAPALM - command execution on NAPLM controller from host

DEFION Research Labs https://defion.security/en/research-labs/mysql-connector-j-unexpected-deserialisation-of-java-objects/ 2017-04-25T12:00:00Z 2017-04-25T12:00:00Z

MySQL Connector/J - Unexpected deserialisation of Java objects

DEFION Research Labs https://defion.security/en/research-labs/ansible-command-execution-on-ansible-controller-from-host/ 2017-01-09T12:00:00Z 2017-01-09T12:00:00Z

Ansible - command execution on Ansible controller from host

DEFION Research Labs https://defion.security/en/research-labs/observium-unauthenticated-remote-code-execution/ 2016-11-10T12:00:00Z 2016-11-10T12:00:00Z

Observium - unauthenticated remote code execution

DEFION Research Labs https://defion.security/en/research-labs/csrp-srpforjava-obtaining-of-hashed-passwords/ 2016-08-18T12:00:00Z 2016-08-18T12:00:00Z

cSRP/srpforjava - obtaining of hashed passwords

DEFION Research Labs https://defion.security/en/research-labs/startencrypt-obtaining-valid-ssl-certificates-for-unauthorized-domains/ 2016-06-30T12:00:00Z 2016-06-30T12:00:00Z

StartEncrypt - obtaining valid SSL certificates for unauthorized domains

DEFION Research Labs