Research

Research & Writeups

IOC breakdowns, detection engineering notes, and lab writeups.

Phish-Report: Sender Typosquatting, QR Decoding, and a Decompression Bomb in Review

Six new detections shipped to the phish-report pipeline this round, and the security review that ran against the diff before merge caught a real memory-exhaustion bug along with four other verified issues.

Farksecurity.com Security Audit, August 2026

A self-audit of this site's infrastructure covering OSINT recon, HTTP header hygiene, and exposed service scanning, plus the fixes that came out of it.

Welcome to the Research Hub

How writeups get published here, and what to expect from this section.