We try hard to do this with Ludus. We've gotten huge value from the Ludus Discord and watching what people struggle with or have to fight to get to work and that makes us try to solve that issue in Ludus itself.
It's a balance of not adding every little feature though, so there is art to it.
SolarWinds RCE (@chudyPB), Windows 11 Recall-based LPE (@filip_dragovic), Robot RCEs (@olivier_boschko + @ruikai), EDR as a RAT (@p0w1_), and more!
blog.badsectorlabs.com/last-week-in...
Firefox RCE (@kqx_io), Havoc Professional (@C5pider + @0xC4RN4GE + @avx128), afd.sys UAF (@Dark_Puzzle + @Bad_Jubies), macOS JIT abuse (@kyleavery), AEMonitor (@__pberba__), and more!
blog.badsectorlabs.com/last-week-in...
SharePoint enumeration (@matthiasdeeg), LNK "0days" (@Wietze), AMD driver LPE (@Bad_Jubies), POSTing to superadmin (@XeEaton), and more!
blog.badsectorlabs.com/last-week-in...
"Negative-day" discovery (@spaceraccoonsec), Exploit gen with LLMs (@seanhn), Harmony LPE (@johnnyspandex + @buffaloverflow), NetSupport Manager RCE (@0xor_solo), Azure blob C2 (@KingOfTheNOPs + @senderend) and more!
blog.badsectorlabs.com/last-week-in...
SmarterMail Pre-auth RCE (@chudyPB + @SinSinology), Claude Code code execution (@ryotkak), VSS create (@RicardoJoseRF ), EDRStartupHinder (@TwoSevenOneT), and more!
blog.badsectorlabs.com/last-week-in...
Start your 2026 off with 3 weeks of news, techniques, write-ups, and exploits!
blog.badsectorlabs.com/last-week-in...
You can always read the most recent edition at blog.badsectorlabs.com
See you in 2026! 🎉
Thanks to the community for sharing your work!
Follow along on 🦋 Bluesky (@badsectorlabs.com), 🐘 Mastodon (@badsectorlabs@infosec.exchange), sign up for the email newsletter at subscribe.badsectorlabs.com/subscription...,
or subscribe to the RSS feed at blog.badsectorlabs.com/feeds/all.at...
We published 44 editions of Last Week in Security in 2025, the best free technical cybersecurity newsletter.
We sifted through the noise (without AI!) to deliver:
📰 179 News Stories
🧠 407 Techniques & Write-ups
🛠️ 438 Tools & Exploits
👀 51 New X Accounts & 37 New Blogs followed
SCOM lab (@synzack21), WatchGuard RCE (@_mccaulay), Clickjacking with SVGs (@rebane2001), macOS LPE (@theevilbit), a new private phone company (@nickcalyx + @phreeli), Proxmox tradecraft (@ZephrFish) and more!
blog.badsectorlabs.com/last-week-in...
SCOM is one of the most deployed, but least researched, System Center products.
Zach Stein breaks down how it works + how to build a lab to test new tradecraft. ghst.ly/3Ymzfcw
Apple's sourcemaps takedown (@moeruri), Call stack sig bypass (@saerxcit), AD Site pwnage (@croco_byte), sneaky remap (@MagisterQuis), Deceptiq launch (@deceptiq_), and more!
blog.badsectorlabs.com/last-week-in...
WriteAccountRestrictions fun (@unsigned_sh0rt), RCE in Dell UnityVSA (@SinSinology), Unity Runtime exploit (@ryotkak), Lenovo DCC LPE (@0x4d5aC), remote control over generators (@XeEaton), and more!
blog.badsectorlabs.com/last-week-in...
FreeBPX RCE (@chudyPB), badpie (@dtmsecurity), macOS auditd malloc woes (@jfmeee), Spotlight TCC leak (@patrickwardle), WSUS relaying (@Coontzy1), pyLDAPGui (@ZephrFish), and more!
blog.badsectorlabs.com/last-week-in...
Sure, a bunch of NPM packages got backdoor'd (again), but don't miss the great research and tools released last week! blog.badsectorlabs.com/last-week-in...
Lots of tooling around the new Bloodhound "OpenGraph" standard this week including vCenterHound from
@m0rd4vid and the bhopengraph library from
@podalirius_.
blog.badsectorlabs.com/last-week-in...
DEF CON releases, PDQ SmartDeploy creds (@unsigned_sh0rt), FortiSIEM root command injection (@SinSinology), a cat themed loader (@vxunderground), fine-tune LLMs for offsec (@kyleavery_), juicing NTDS.DIT (@MGrafnetter), and more!
blog.badsectorlabs.com/last-week-in...
Come see a preview of the new Web UI for 🏟️Ludus at the Embedded Systems Village. Our mini-workshop walks you through deploying a range and then hacking an emulated IP camera.
In Vegas for hacker summer camp and trying to get food without breaking the bank? I vibed a simple map site: defconfood.badsectorlabs.com
Come see Ludus at the embedded Systems Village - hack an IP camera, see the new UI, and get a sticker!
Last LWIS before DEF CON. Come see us in the Embedded Systems Village where we have a mini-workshop hosting an emulated camera on Ludus for you to hack!
blog.badsectorlabs.com/last-week-in...
VMware Tools LPE (@justbronzebee), Adaptix C2 0.7 (@hacker_ralf), Ludus MCP (@__Mastadon), SOAP(y) (@_logangoins), and more!
blog.badsectorlabs.com/last-week-in...
PIC agents (@_RastaMouse), ToolShell, Async BOFs (@Cneelis), SCCM MP relays (@unsigned_sh0rt), RAITrigger (@ShitSecure), and more!
blog.badsectorlabs.com/last-week-in...
LudusHound (@bagelByt3s), SpeechRuntimeMove (@ShitSecure), Havoc Pro (@C5pider), FortiWeb RCE (@SinSinology), SailPoint IQService RCE (@NetSPI), Altiris RCE (@lefterispan), WAF bypass (@nyxgeek), and more!
blog.badsectorlabs.com/last-week-in...
Ludushound shows the power of community driven innovation in cybersecurity. @bagelByt3s created an awesome tool to convert bloodhound data into a working lab in 🏟️ Ludus. Replicate complex live environments with automation - and get back to the fun stuff!
specterops.io/blog/2025/07...
Lots of good write ups (like Citrix Bleed 2) but my favorite was seeing how 🏟️ Ludus.cloud helped Cameron Stish of Guidepoint Security find "LoopyTicket" (CVE-2025-33073).
blog.badsectorlabs.com/last-week-in...
Tons of great content released over the past few weeks. Get caught up with Last Week in Security!
blog.badsectorlabs.com/last-week-in...
This week's edition is packed full of great techniques and tools! One of the longest posts we've done; there's so much cool stuff being released.
blog.badsectorlabs.com/last-week-in...
@raphaelmudge.bsky.social summed up why we built and released Ludus open source: "Develop technologies that give individual operators and researchers LEVERAGE acting on hypothesis and make it fast to try things, adapt, and modify."
When spinning up ADCS or SCCM is 3 commands, it gives you leverage.
