--- title: Research and Insights description: Cyber Security Research and Insights --- [![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=254&height=120&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/über-uns) - [Experience](https://avantguard.io/en/erfahrung) - [Career](https://avantguard.io/de/karriere) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/kontakt) En - [English](https://avantguard.io/en/blog) - [German](https://avantguard.io/blog) [![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=144&height=65&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en) [![Dark-logo-small-1](https://www.fthemes.net/hubfs/Dark-logo-small-1.png "Dark-logo-small-1")](https://avantguard.io?hsLang=en) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/über-uns) - [Experience](https://avantguard.io/en/erfahrung) - [Career](https://avantguard.io/de/karriere) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/kontakt) En - [English](https://avantguard.io/en/blog) - [German](https://avantguard.io/blog) [![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=144&height=65&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/über-uns) - [Experience](https://avantguard.io/en/erfahrung) - [Career](https://avantguard.io/de/karriere) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/kontakt) Current language: English - [English](https://avantguard.io/en/blog) - [German](https://avantguard.io/blog) Filter by tag All Offensive Red Team Research Covenant Bypass AI Cleartext Credentials Defensive News AD CS Active Directory Conti HTB Keepass PingCastle PowerShell Pro Labs Ransomware Review Shares Snaffler [![The Blind Spot Of 802.1X Network Access Control (NAC)](https://avantguard.io/hs-fs/hubfs/Blog/SpectrePi/spectrepi-banner.png?width=400&upsize=true&name=spectrepi-banner.png)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) [Bypass](https://avantguard.io/en/blog/tag/bypass) [Research](https://avantguard.io/en/blog/tag/research) [Defensive](https://avantguard.io/en/blog/tag/defensive) ##### [The Blind Spot Of 802.1X Network Access Control (NAC)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) A network device in the reception area, a camera outdoors, a docking station at a shared workplace:... 19 minute read [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) 28 August 2026 [Read More](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) [![BlueHammer and RedSun analysed](https://avantguard.io/hs-fs/hubfs/Blog/BlueHammerRedSun/bluehammer-1.png?width=400&upsize=true&name=bluehammer-1.png)](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) [News](https://avantguard.io/en/blog/tag/news) ##### [BlueHammer and RedSun analysed](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) In the past few months, a security researcher that goes by the name of Chaotic Eclipse has... 21 minute read [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) 9 June 2026 [Read More](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) [![Plaintext in Memory: Revisiting Browser Password Security](https://avantguard.io/hs-fs/hubfs/Blog/Passwortsicherheit%20im%20Browser/title-small.png?width=400&upsize=true&name=title-small.png)](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Research](https://avantguard.io/en/blog/tag/research) [Cleartext Credentials](https://avantguard.io/en/blog/tag/cleartext-credentials) ##### [Plaintext in Memory: Revisiting Browser Password Security](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) ## Initial situation In early May, it became publicly known that Microsoft Edge keeps stored passwords... 2 minute read [Christian Bieg](https://avantguard.io/en/blog/author/christian-bieg) 22 May 2026 [Read More](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) [![Experience Report: AI-Assisted BOF Development in Red Teaming](https://avantguard.io/hs-fs/hubfs/image-3-png.png?width=400&upsize=true&name=image-3-png.png)](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) [Offensive](https://avantguard.io/en/blog/tag/offensive) [AI](https://avantguard.io/en/blog/tag/ai) ##### [Experience Report: AI-Assisted BOF Development in Red Teaming](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) Over the past few days, I have been exploring how a current credential dumping tool like KslKatz... 7 minute read [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) 8 April 2026 [Read More](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) [![Threadless Ops II – Enhanced Evasion](https://avantguard.io/hs-fs/hubfs/Blog/threadless2/new_plan.png?width=400&upsize=true&name=new_plan.png)](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Research](https://avantguard.io/en/blog/tag/research) [Red Team](https://avantguard.io/en/blog/tag/red-team) ##### [Threadless Ops II – Enhanced Evasion](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) The process injection technique via threadless injection that we discussed in our [first blog post](https://avantguard.io/blog/threadless-ops?hsLang=en)... 17 minute read [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) 27 February 2026 [Read More](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) [![The Sins Of NTLMv1](https://avantguard.io/hs-fs/hubfs/Blog/NTLMv1/rainbow_table_structure.png?width=400&upsize=true&name=rainbow_table_structure.png)](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) ##### [The Sins Of NTLMv1](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) In the past year, one particular configuration in our clients' Active Directory (AD) domains has... 11 minute read [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) 3 February 2026 [Read More](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) [![Threadless Ops - Enhanced Shellcoding for Threadless Injections](https://avantguard.io/hs-fs/hubfs/Overview_Plan.png?width=400&upsize=true&name=Overview_Plan.png)](https://avantguard.io/en/blog/threadless-ops) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Research](https://avantguard.io/en/blog/tag/research) [Red Team](https://avantguard.io/en/blog/tag/red-team) ##### [Threadless Ops - Enhanced Shellcoding for Threadless Injections](https://avantguard.io/en/blog/threadless-ops) Process Injection is essential in red teaming and serves various strategic objectives, enabling... 39 minute read [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) 17 April 2025 [Read More](https://avantguard.io/en/blog/threadless-ops) [![The next milestone for successful growth](https://avantguard.io/hs-fs/hubfs/Blog/blog_partner_avantguard_cyspa.png?width=400&upsize=true&name=blog_partner_avantguard_cyspa.png)](https://avantguard.io/en/blog/der-nächste-meilenstein-für-erfolgreiches-wachstum) [News](https://avantguard.io/en/blog/tag/news) ##### [The next milestone for successful growth](https://avantguard.io/en/blog/der-nächste-meilenstein-für-erfolgreiches-wachstum) Avantguard cyber security was transformed from a limited liability company (GmbH) into a stock... 1 minute read [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) 14 January 2025 [Read More](https://avantguard.io/en/blog/der-nächste-meilenstein-für-erfolgreiches-wachstum) [![Penetration Testing For AI Applications](https://avantguard.io/hs-fs/hubfs/Blog/mitre_atlas.png?width=400&upsize=true&name=mitre_atlas.png)](https://avantguard.io/en/blog/penetration-testing-for-ai-applications) [Research](https://avantguard.io/en/blog/tag/research) [AI](https://avantguard.io/en/blog/tag/ai) ##### [Penetration Testing For AI Applications](https://avantguard.io/en/blog/penetration-testing-for-ai-applications) LLM solutions are now an integral part of our customers' day-to-day work and are used in various... 10 minute read [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) 2 December 2024 [Read More](https://avantguard.io/en/blog/penetration-testing-for-ai-applications) [![Get A Handle On Indicators Of Compromise](https://avantguard.io/hs-fs/hubfs/Monitoring_File_Handles/PCRE_in_temp.png?width=400&upsize=true&name=PCRE_in_temp.png)](https://avantguard.io/en/blog/get-a-handle-on-indicators-of-compromise) [Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) ##### [Get A Handle On Indicators Of Compromise](https://avantguard.io/en/blog/get-a-handle-on-indicators-of-compromise) It's been a while since our latest blog post. Being busy with customer projects and growing our... 4 minute read [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) 4 July 2024 [Read More](https://avantguard.io/en/blog/get-a-handle-on-indicators-of-compromise) [1](https://avantguard.io/en/blog) [2](https://avantguard.io/en/blog/page/2) [3](https://avantguard.io/en/blog/page/3) ##### Menu - [Home](https://avantguard.io/en/homepage) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/über-uns) - [Experience](https://avantguard.io/en/erfahrung) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/kontakt) ##### Services - [Basic Health Check](https://avantguard.io/en/basic_health_check) - [Penetration Testing](https://avantguard.io/en/penetration-test) - [Red Teaming](https://avantguard.io/en/red-teaming) - [AD Security Improvement](https://avantguard.io/en/ad_improvement) - [HIST](https://avantguard.io/en/hist) - [Other](https://avantguard.io/en/services) ##### Research - [Cleartext Credentials](https://avantguard.io/en/blog/plaintext-credentials) - [Overload Mapping](https://avantguard.io/blog/overload-mapping-vs.-memory-scanner) - [Ransomware](https://avantguard.io/en/blog/what-really-helps-against-ransomware) - [Red Teaming](https://avantguard.io/en/blog/red-teaming) - [KeePass](https://avantguard.io/en/blog/attacking-and-hardening-keepass) - [PowerShell Logging](https://avantguard.io/en/blog/powershell-enhanced-logging-capabilities-bypass) - [AD CS](https://avantguard.io/en/blog/active-directory-certificate-services) © 2026 avantguard cyber security AG ##### avantguard cyber security AG Neue Jonastrasse 52 8640 Rapperswil-Jona Switzerland +41 55 253 30 30 [info@avantguard.io](mailto:info@avantguard.io) ![flagge_schweiz](https://avantguard.io/hs-fs/hubfs/flagge_schweiz.png?width=40&height=40&name=flagge_schweiz.png) [Privacy Statement](https://avantguard.io/en/datenschutzerkl%C3%A4rung?hsLang=en) [Follow us on LinkedIn](https://ch.linkedin.com/company/avantguard-cyber-security-ag) [Follow us on Twitter](https://twitter.com/avantguard_io) ![](https://f.hubspotusercontent00.net/hubfs/7712601/back-to-top.png)