New practical tricks for Groovy template engine exploitation in a real-world scenario. First installment of the Offensive Rust series that introduces learning resources and walks through the implementation of a red teaming tool. Coordinated disclosure writeup about multiple vulnerabilities in Zyxel zysh (CVE-2022-26531, CVE-2022-26532). A flash talk about threat intelligence and red teaming by our technical director Marco Ivaldi (in Italian with English transcript). Coordinated disclosure writeup about multiple vulnerabilities in RT-Thread RTOS (10 CVEs). Our technical director Marco Ivaldi's last Infiltrate talk about improving vulnerability research skills. Coordinated disclosure writeup about multiple vulnerabilities in Eclipse ThreadX (CVE-2024-2214, CVE-2024-2212, CVE-2024-2452). Introducing a brand new, comprehensive Semgrep ruleset for C/C++ SAST and vulnerability research. Coordinated disclosure writeup about Solaris, CDE, and X.Org vulnerabilities (CVE-2022-46285, CVE-2023-24039, CVE-2023-24040). Introducing new Semgrep rules for C/C++ SAST and vulnerability research and a static analysis workflow applied to real-world examples. Our technical director Marco Ivaldi's opening keynote for RomHack 2021. Introducing a collection of weggli patterns for C/C++ SAST and vulnerability research. Our technical director Marco Ivaldi is interviewed in the Seemposium Podcast and talks about the evolution of penetration testing and security research. Introducing new binary vulnerability research tools and methodology, based on custom Ghidra plugins and Semgrep. Coordinated disclosure writeup about multiple vulnerabilities in RIOT OS (CVE-2024-31225, CVE-2024-32017, CVE-2024-32018, and more). Coordinated disclosure writeup about multiple vulnerabilities in Zephyr RTOS (12 CVEs). Our technical director Marco Ivaldi describes his experience at the first-ever Zero Day Quest event and at the BlueHat Podcast. Offensive Rust series article that introduces new learning resources and walks through the implementation of a red teaming tool (blindsight). Coordinated disclosure of a local privilege escalation vulnerability on Zyxel USG FLEX H Series (CVE-2025-1731). Offensive Rust series article that introduces new IDA plugins (rhabdomancer, haruspex, augur) to streamline vulnerability research. HN Security's Technical Director Marco Ivaldi walks through using idalib's Rust bindings with IDA 9.2 to streamline vulnerability research. Real-world attack examples against GenAI and LLMs, highlighting attack techniques and often-overlooked security risks. Offensive Rust series article that introduces a new AI tool (oneiromancer) to aid with reverse engineering.