Research

Java Foreign Function and Memory API (java.lang.foreign) is a powerful tool that you can use to take advantage of various OS-specific optimizations. Often though, due to high usage of the C/C++ preprocessor and its powerful macros it can be cumbersome to write and maintain the Java-side code. Help is available in the form of jextract […]

A hardware verdict flipped twice in one week, two verification tools turned out to be quietly missing errors, and a real brokerage account needed two manual human interventions This is the English version of a post originally written in Korean for my algorithmic trading system devlog(new tab). It's been a while since the last devlog, […]

하드웨어 교체 판정이 한 주 동안 두 번 뒤집혔고, 자동 검증 도구 두 개가 조용히 오류를 놓치고 있었다는 게 드러났고, 실계좌에서는 사람이 두 번 직접 개입해야 했습니다 지난 개발일지 이후로 조금 뜸했는데, 그 사이가 오히려 가장 바빴던 한 주였습니다. 월요일엔 그래픽카드를 통째로 바꿨고, 그 판정이 며칠 사이 두 번 뒤집혔습니다. 같은 주에 새로 만든 검증 […]

1. Introduction If you are developing an iframe-based widget, embedded tool, or third-party script, you will inevitably run into a question that sounds deceptively simple: "Which website embedded my iframe?" Knowing the parent domain is essential for domain authorization, analytics, and security origin checks. But here is the catch: modern web browsers trust nobody — […]

Recording virtual meetings like Google Meet or Zoom often comes with annoying hurdles: 5-minute freemium limits, forced software installations, or needing explicit host permission just to record local audio. In this guide, we'll walk through how to build a browser-native screen recorder using the HTML5 MediaRecorder API and getDisplayMedia to capture both tab audio (meeting […]

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence (AI)-powered Linux implant dubbed RedC2 4.0. "When the module loads, it locates the bundled binary, marks it executable, and launches it as a detached background process," TrendAI, Trend Micro's

Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and registry operations on Windows systems ranging from Windows 7 through Windows 11 25H2, with no software flaw exploited and no driver imported from outside the machine. The driver, BTR.sys (Boot Time Removal […]

Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multi-stage downloader to enable ad fraud and creation of a proxy botnet. "The malware spread […]

Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making. Cybersecurity has experienced a similar transformation. While attackers employ AI to automate

Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal security review. Four of the security vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, regardless of the device configuration. A brief description of each of the flaws is below –