Archive - Calif

Oracle SSO, SOS

You've probably seen the news: Oracle Cloud got popped, exposing 6 million records from over 140,000 tenants.

Apr 8 •

March 2025

YouTube Threat Modeling

Last week, we delivered our first training session with YouTube engineers on the attacker's mindset and threat modeling.

Mar 25 •

January 2025

In Vietnam, we have three seasons: hot, hotter, and damn hot!

Jan 2 •

December 2024

CVE-2024-10382: Arbitrary code execution in Android Auto and various apps

In July 2024, Google engaged Calif to audit Android Automotive OS (AAOS) and Android Auto.

Dec 18, 2024 •

and

November 2024

What we do when we aren't hacking you

In my last year as a teenager, I worked as an IT assistant for Mr.

Nov 30, 2024 •

September 2024

Building new hospitals in Vietnam

Two years ago, when a close friend of the family (let's call him D) was sick, I took him to tour the hospitals in Saigon.

Sep 20, 2024 •

August 2024

Wormable Substack XSS

We found a stored Cross-Site Scripting (XSS) vulnerability in Substack.

Aug 12, 2024 •

July 2024

Type confusion attacks in ProseMirror editors

Jul 16, 2024 •

May 2024

Dissecting LockBit v3 ransomware

We analyzed a variant of LockBit v3 ransomware, and rediscovered a bug that allows us to decrypt some data without paying the ransom. We also found a…

May 2, 2024 •

,

, and

April 2024

Ransomware Response Strategy

Apr 11, 2024 •

March 2024

Microsoft Exchange 2010 Arbitrary User Impersonation

Microsoft Exchange is one of the most critical assets in any organization.

Mar 5, 2024 •

February 2024

A trip to the White House

Two days before the Lunar New Year 2024, I went to the White House to meet with representatives of the National Security Council (NSC) to discuss…

Feb 11, 2024 •

#nojs-banner { position: fixed; bottom: 0; left: 0; padding: 16px 16px 16px 32px; width: 100%; box-sizing: border-box; background: red; color: white; font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; line-height: 13px; } #nojs-banner a { color: inherit; text-decoration: underline; } This site requires JavaScript to run correctly. Please turn on JavaScript or unblock scripts