--- title: Research and Insights description: Cyber Security Research and Insights image: https://avantguard.io/hubfs/raw_assets/public/avantguard/images/og-default.png --- [Skip to content](https://avantguard.io/en/blog#main) [![avantguard cyber security](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=128&height=61&name=LogoInverted.png)](https://avantguard.io/en/) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/about-us) - [Experience](https://avantguard.io/en/experience) - [Career](https://avantguard.io/en/careers) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/contact) [DE](https://avantguard.io/blog) EN [Request an offer](https://avantguard.io/en/request-an-offer) [DE](https://avantguard.io/blog) EN [Request an offer](https://avantguard.io/en/request-an-offer) Blog # Research and Insights Cyber Security Research and Insights Search the blog Search - [All](https://avantguard.io/en/blog) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Red Team](https://avantguard.io/en/blog/tag/red-team) - [Research](https://avantguard.io/en/blog/tag/research) - [Covenant](https://avantguard.io/en/blog/tag/covenant) - [Bypass](https://avantguard.io/en/blog/tag/bypass) - [AI](https://avantguard.io/en/blog/tag/ai) - [Cleartext Credentials](https://avantguard.io/en/blog/tag/cleartext-credentials) - [Defensive](https://avantguard.io/en/blog/tag/defensive) - [News](https://avantguard.io/en/blog/tag/news) - [Review](https://avantguard.io/en/blog/tag/review) - [AD CS](https://avantguard.io/en/blog/tag/ad-cs) - [Active Directory](https://avantguard.io/en/blog/tag/active-directory) - [Conti](https://avantguard.io/en/blog/tag/conti) - [HTB](https://avantguard.io/en/blog/tag/htb) - [Keepass](https://avantguard.io/en/blog/tag/keepass) - [PingCastle](https://avantguard.io/en/blog/tag/pingcastle) - [PowerShell](https://avantguard.io/en/blog/tag/powershell) - [Pro Labs](https://avantguard.io/en/blog/tag/pro-labs) - [Ransomware](https://avantguard.io/en/blog/tag/ransomware) - [Shares](https://avantguard.io/en/blog/tag/shares) - [Snaffler](https://avantguard.io/en/blog/tag/snaffler) [![](https://avantguard.io/hs-fs/hubfs/Blog/Kamera_1/root_shell_backdoor.png?width=1200&name=root_shell_backdoor.png)](https://avantguard.io/en/blog/kommt-ihre-neue-kamera-mit-backdoor) Latest post - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Review](https://avantguard.io/en/blog/tag/review) ## [Does Your New Camera Come with a Backdoor?](https://avantguard.io/en/blog/kommt-ihre-neue-kamera-mit-backdoor) We tested an off-the-shelf camera for vulnerabilities and saw how little it takes to plant a backdoor ourselves. [Timofey Shpakov](https://avantguard.io/en/blog/author/timofey-shpakov) October 29, 2026 17 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/SpectrePi/spectrepi-banner.png?width=800&name=spectrepi-banner.png)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) - [Bypass](https://avantguard.io/en/blog/tag/bypass) - [Research](https://avantguard.io/en/blog/tag/research) - [Defensive](https://avantguard.io/en/blog/tag/defensive) ### [The Blind Spot Of 802.1X Network Access Control (NAC)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) Thanks to SpectrePi, a physical device on the network, an attacker can bypass the 802.1X NAC. This attack vector is of particular interest to organisations that operate devices ... [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) August 28, 2026 16 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/BlueHammerRedSun/bluehammer-1.png?width=800&name=bluehammer-1.png)](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Red Team](https://avantguard.io/en/blog/tag/red-team) - [News](https://avantguard.io/en/blog/tag/news) ### [BlueHammer and RedSun analysed](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) This article takes a closer look at two recent vulnerabilities, BlueHammer and RedSun, and explains why they have attracted so much attention. [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) June 9, 2026 15 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/Passwortsicherheit%20im%20Browser/title-small.png?width=800&name=title-small.png)](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Cleartext Credentials](https://avantguard.io/en/blog/tag/cleartext-credentials) ### [Plaintext in Memory: Revisiting Browser Password Security](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) This blog post shows how browsers expose passwords in memory and how they can potentially be extracted. [Christian Bieg](https://avantguard.io/en/blog/author/christian-bieg) May 22, 2026 3 min read [![](https://avantguard.io/hs-fs/hubfs/image-3-png.png?width=800&name=image-3-png.png)](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [AI](https://avantguard.io/en/blog/tag/ai) ### [Experience Report: AI-Assisted BOF Development in Red Teaming](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) This blog post details my experience utilizing artificial intelligence in offensive cybersecurity to port a current LSASS dumping tool into a Beacon Object File (BOF) for use in a ... [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) April 8, 2026 7 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/threadless2/new_plan.png?width=800&name=new_plan.png)](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [Threadless Ops II – Enhanced Evasion](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) In Threadless Ops II, we combine threadless injection with evasion techniques to bypass EDR heuristics. Using Crystal Palace lets us modularly integrate tradecraft (call stack ... [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) February 27, 2026 17 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/NTLMv1/rainbow_table_structure.png?width=800&name=rainbow_table_structure.png)](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [The Sins Of NTLMv1](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) Why NTLMv1 is insecure and two of the most popular attack vectors: brute-force attacks (particularly rainbow table attacks) and relaying attacks. [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) February 3, 2026 13 min read [![](https://avantguard.io/hs-fs/hubfs/Overview_Plan.png?width=800&name=Overview_Plan.png)](https://avantguard.io/en/blog/threadless-ops) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [Threadless Ops - Enhanced Shellcoding for Threadless Injections](https://avantguard.io/en/blog/threadless-ops) Process Injection is essential in red teaming and serves various strategic objectives, enabling attackers to expand their capabilities. [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) April 17, 2025 23 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/blog_partner_avantguard_cyspa.png?width=800&name=blog_partner_avantguard_cyspa.png)](https://avantguard.io/en/blog/der-nächste-meilenstein-für-erfolgreiches-wachstum) - [News](https://avantguard.io/en/blog/tag/news) ### [The next milestone for successful growth](https://avantguard.io/en/blog/der-nächste-meilenstein-für-erfolgreiches-wachstum) As a stock corporation, avantguard continues to secure its position and strengthens its co-operation with CYSPA. [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) January 14, 2025 2 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/mitre_atlas.png?width=800&name=mitre_atlas.png)](https://avantguard.io/en/blog/penetration-testing-for-ai-applications) - [Research](https://avantguard.io/en/blog/tag/research) - [AI](https://avantguard.io/en/blog/tag/ai) ### [Penetration Testing For AI Applications](https://avantguard.io/en/blog/penetration-testing-for-ai-applications) An insight into the rapidly expanding field of testing AI applications for vulnerabilities from a penetration tester's perspective. [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) December 2, 2024 13 min read 1. Page 1 2. [Page 2](https://avantguard.io/en/blog/page/2) 3. [Page 3](https://avantguard.io/en/blog/page/3) [→Next page](https://avantguard.io/en/blog/page/2) ## Wie sicher sind Ihre Systeme wirklich? Erzählen Sie uns von Ihrem Vorhaben. Sie erhalten ein unverbindliches Angebot. [Offerte anfragen](https://avantguard.io/offerte-anfragen) [+41 55 253 30 30](tel:+41552533030) [![avantguard cyber security](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=140&height=66&name=LogoInverted.png)](https://avantguard.io/en/) avantguard cyber security AG Neue Jonastrasse 52 8640 Rapperswil-Jona, Switzerland [+41 55 253 30 30](tel:+41552533030) [info@avantguard.io](mailto:info@avantguard.io) ## Company - [Services](https://avantguard.io/en/services) - [About us](https://avantguard.io/en/about-us) - [Experience](https://avantguard.io/en/experience) - [AI at avantguard](https://avantguard.io/en/ai-at-avantguard) - [Careers](https://avantguard.io/en/careers) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/contact) ## Services - [Penetration Testing](https://avantguard.io/en/penetration-test) - [Red Teaming](https://avantguard.io/en/red-teaming) - [Attack Simulation](https://avantguard.io/en/attack-simulation) - [FINMA-regulated pentesting](https://avantguard.io/en/finma-regulated-pentesting) - [AD Security Improvement](https://avantguard.io/en/ad_improvement) - [mesher](https://avantguard.io/en/mesher) - [All services](https://avantguard.io/en/services) ## Research - [Does Your New Camera Come with a Backdoor?](https://avantguard.io/en/blog/kommt-ihre-neue-kamera-mit-backdoor) - [The Blind Spot Of 802.1X Network Access Control (NAC)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) - [BlueHammer and RedSun analysed](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) - [Plaintext in Memory: Revisiting Browser Password Security](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) - [All posts](https://avantguard.io/en/blog) © 2026 avantguard cyber security AG - [Privacy policy](https://avantguard.io/en/privacy-policy) - [Deutsch](https://avantguard.io/)