$3CURIty pRof!13[dd-mm-yyyy]

Certifications & Advisories

ISO 27001 - Lead Auditor

Intertek

Certified Red Team Professional (CRTP)25-10-2024

Altered Security

CVE-2022-0162 [TP-Link TL- WR841N]07-02-2022

CERT-IN

CVE-2022-4616 [Delta 4G Router DX-3021]20-12-2022

CISA | CERT-US

CVE 2021-4161 [Moxa MGate Protocol Gateways]23-12-2021

CISA | CERT-US [CVSS 9.8]

CVE-2024-7755 [EWON FLEXY 202]17-10-2024

CISA | CERT-US

13 Vulnerabilities Published in Dlink 2750-U25-01-2022

DLink

Malware Analysis

PYPI .NET LOADER STEALER

Typing Unions - PYPI supply chain attack03-04-2026

Multi-stage .NET loader with UAC bypass via COM hijacking, info stealer, Delphi keylogger, meterpreter shellcode, and cryptocurrency clipboard hijacker. 4 embedded payloads across C#, Delphi, and C++.

-Anurag Chevendra

NPM STEALER JS

colours - NPM supply chain attack03-04-2026

Obfuscated Discord token stealer and injector targeting 13 browser/Discord clients. Fetches stage-2 payload from C2, infects Discord desktop core index.js, sabotages BetterDiscord webhooks, and exfiltrates tokens with system info.

-Anurag Chevendra