--- title: Research and Insights description: Cyber Security Research and Insights --- [Skip to content](https://avantguard.io/en/blog#main) [![avantguard cyber security](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=128&height=61&name=LogoInverted.png)](https://avantguard.io/en?hsLang=en) - [Services](https://avantguard.io/en/services?hsLang=en) - [About Us](https://avantguard.io/en/about-us?hsLang=en) - [Experience](https://avantguard.io/en/experience?hsLang=en) - [Career](https://avantguard.io/de/karriere?hsLang=en) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/contact?hsLang=en) [DE](https://avantguard.io/blog) EN [Request an offer](https://avantguard.io/en/request-an-offer?hsLang=en) [DE](https://avantguard.io/blog) EN [Request an offer](https://avantguard.io/en/request-an-offer?hsLang=en) Blog # Research and Insights Cyber Security Research and Insights - [All](https://avantguard.io/en/blog/all) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Red Team](https://avantguard.io/en/blog/tag/red-team) - [Research](https://avantguard.io/en/blog/tag/research) - [Covenant](https://avantguard.io/en/blog/tag/covenant) - [Bypass](https://avantguard.io/en/blog/tag/bypass) - [AI](https://avantguard.io/en/blog/tag/ai) - [Cleartext Credentials](https://avantguard.io/en/blog/tag/cleartext-credentials) - [Defensive](https://avantguard.io/en/blog/tag/defensive) - [News](https://avantguard.io/en/blog/tag/news) - [AD CS](https://avantguard.io/en/blog/tag/ad-cs) - [Active Directory](https://avantguard.io/en/blog/tag/active-directory) - [Conti](https://avantguard.io/en/blog/tag/conti) - [HTB](https://avantguard.io/en/blog/tag/htb) - [Keepass](https://avantguard.io/en/blog/tag/keepass) - [PingCastle](https://avantguard.io/en/blog/tag/pingcastle) - [PowerShell](https://avantguard.io/en/blog/tag/powershell) - [Pro Labs](https://avantguard.io/en/blog/tag/pro-labs) - [Ransomware](https://avantguard.io/en/blog/tag/ransomware) - [Review](https://avantguard.io/en/blog/tag/review) - [Shares](https://avantguard.io/en/blog/tag/shares) - [Snaffler](https://avantguard.io/en/blog/tag/snaffler) [![](https://avantguard.io/hs-fs/hubfs/Blog/SpectrePi/spectrepi-banner.png?width=1200&name=spectrepi-banner.png)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) Latest post - [Bypass](https://avantguard.io/en/blog/tag/bypass) - [Research](https://avantguard.io/en/blog/tag/research) - [Defensive](https://avantguard.io/en/blog/tag/defensive) ## [The Blind Spot Of 802.1X Network Access Control (NAC)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) Thanks to SpectrePi, a physical device on the network, an attacker can bypass the 802.1X NAC. This attack vector is of particular interest to organisations that operate devices outside their secure premises, such as CCTV cameras. [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) August 28, 2026 16 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/BlueHammerRedSun/bluehammer-1.png?width=800&name=bluehammer-1.png)](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Red Team](https://avantguard.io/en/blog/tag/red-team) - [News](https://avantguard.io/en/blog/tag/news) ### [BlueHammer and RedSun analysed](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) This article takes a closer look at two recent vulnerabilities, BlueHammer and RedSun, and explains why they have attracted so much attention. [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) June 9, 2026 15 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/Passwortsicherheit%20im%20Browser/title-small.png?width=800&name=title-small.png)](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Cleartext Credentials](https://avantguard.io/en/blog/tag/cleartext-credentials) ### [Plaintext in Memory: Revisiting Browser Password Security](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) This blog post shows how browsers expose passwords in memory and how they can potentially be extracted. [Christian Bieg](https://avantguard.io/en/blog/author/christian-bieg) May 22, 2026 3 min read [![](https://avantguard.io/hs-fs/hubfs/image-3-png.png?width=800&name=image-3-png.png)](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [AI](https://avantguard.io/en/blog/tag/ai) ### [Experience Report: AI-Assisted BOF Development in Red Teaming](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) This blog post details my experience utilizing artificial intelligence in offensive cybersecurity to port a current LSASS dumping tool into a Beacon Object File (BOF) for use in a ... [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) April 8, 2026 7 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/threadless2/new_plan.png?width=800&name=new_plan.png)](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [Threadless Ops II – Enhanced Evasion](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) In Threadless Ops II, we combine threadless injection with evasion techniques to bypass EDR heuristics. Using Crystal Palace lets us modularly integrate tradecraft (call stack ... [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) February 27, 2026 17 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/NTLMv1/rainbow_table_structure.png?width=800&name=rainbow_table_structure.png)](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [The Sins Of NTLMv1](https://avantguard.io/en/blog/die-sünden-von-ntlmv1) Why NTLMv1 is insecure and two of the most popular attack vectors: brute-force attacks (particularly rainbow table attacks) and relaying attacks. [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) February 3, 2026 13 min read [![](https://avantguard.io/hs-fs/hubfs/Overview_Plan.png?width=800&name=Overview_Plan.png)](https://avantguard.io/en/blog/threadless-ops) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [Threadless Ops - Enhanced Shellcoding for Threadless Injections](https://avantguard.io/en/blog/threadless-ops) Process Injection is essential in red teaming and serves various strategic objectives, enabling attackers to expand their capabilities. [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) April 17, 2025 23 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/blog_partner_avantguard_cyspa.png?width=800&name=blog_partner_avantguard_cyspa.png)](https://avantguard.io/en/blog/der-nächste-meilenstein-für-erfolgreiches-wachstum) - [News](https://avantguard.io/en/blog/tag/news) ### [The next milestone for successful growth](https://avantguard.io/en/blog/der-nächste-meilenstein-für-erfolgreiches-wachstum) As a stock corporation, avantguard continues to secure its position and strengthens its co-operation with CYSPA. [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) January 14, 2025 2 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/mitre_atlas.png?width=800&name=mitre_atlas.png)](https://avantguard.io/en/blog/penetration-testing-for-ai-applications) - [Research](https://avantguard.io/en/blog/tag/research) - [AI](https://avantguard.io/en/blog/tag/ai) ### [Penetration Testing For AI Applications](https://avantguard.io/en/blog/penetration-testing-for-ai-applications) An insight into the rapidly expanding field of testing AI applications for vulnerabilities from a penetration tester's perspective. [Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau) December 2, 2024 13 min read [![](https://avantguard.io/hs-fs/hubfs/Monitoring_File_Handles/PCRE_in_temp.png?width=800&name=PCRE_in_temp.png)](https://avantguard.io/en/blog/get-a-handle-on-indicators-of-compromise) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [Get A Handle On Indicators Of Compromise](https://avantguard.io/en/blog/get-a-handle-on-indicators-of-compromise) How file handles can be used to detect and remove indicators of compromise [Jann Lemm](https://avantguard.io/en/blog/author/jann-lemm) July 4, 2024 4 min read 1. Page 1 2. [Page 2](https://avantguard.io/en/blog/page/2) 3. [Page 3](https://avantguard.io/en/blog/page/3) [→Next page](https://avantguard.io/en/blog/page/2) ## Wie sicher sind Ihre Systeme wirklich? Erzählen Sie uns von Ihrem Vorhaben. Sie erhalten ein unverbindliches Angebot. [Offerte anfragen](https://avantguard.io/offerte-anfragen?hsLang=en) [+41 55 253 30 30](tel:+41552533030) [![avantguard cyber security](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=140&height=66&name=LogoInverted.png)](https://avantguard.io/en?hsLang=en) avantguard cyber security AG Neue Jonastrasse 52 8640 Rapperswil-Jona, Switzerland [+41 55 253 30 30](tel:+41552533030) [info@avantguard.io](mailto:info@avantguard.io) ## Company - [Services](https://avantguard.io/en/services?hsLang=en) - [About us](https://avantguard.io/en/about-us?hsLang=en) - [Experience](https://avantguard.io/en/experience?hsLang=en) - [AI at avantguard](https://avantguard.io/en/how-we-use-ai?hsLang=en) - [Careers](https://avantguard.io/en/careers?hsLang=en) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/contact?hsLang=en) ## Services - [Penetration Testing](https://avantguard.io/en/penetration-test?hsLang=en) - [Red Teaming](https://avantguard.io/en/red-teaming?hsLang=en) - [Attack Simulation](https://avantguard.io/en/attack-simulation?hsLang=en) - [FINMA-regulated pentesting](https://avantguard.io/en/finma-regulated-pentesting?hsLang=en) - [AD Security Improvement](https://avantguard.io/en/ad_improvement?hsLang=en) - [mesher](https://avantguard.io/en/mesher?hsLang=en) - [All services](https://avantguard.io/en/services?hsLang=en) ## Research - [All posts](https://avantguard.io/en/blog) © 2026 avantguard cyber security AG - [Privacy policy](https://avantguard.io/en/privacy-policy) - [Deutsch](https://avantguard.io/)