<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Security Research on haxormad</title>
    <link>https://blog.abartan.net/categories/security-research/</link>
    <description>Recent content in Security Research on haxormad</description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Mon, 12 Oct 2026 11:00:00 +1000</lastBuildDate>
    <atom:link href="https://blog.abartan.net/categories/security-research/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Catching a Docker Cryptojacking Campaign With a Custom Honeypot</title>
      <link>https://blog.abartan.net/posts/how-a-custom-honeypot-caught-a-live-docker-cryptojacking-campaign/</link>
      <pubDate>Mon, 12 Oct 2026 11:00:00 +1000</pubDate>
      <guid>https://blog.abartan.net/posts/how-a-custom-honeypot-caught-a-live-docker-cryptojacking-campaign/</guid>
      <description>A custom Linux honeypot caught a multi-stage cryptojacking campaign targeting exposed Docker APIs on July 17, 2026. The payload deployed XMRig via container escape, and its indicators overlap with the Diicot threat cluster.</description>
    </item>
    <item>
      <title>ChromeCast Leaks App Data</title>
      <link>https://blog.abartan.net/posts/chromecast-leaks-app-data/</link>
      <pubDate>Sun, 26 May 2019 00:00:00 +1000</pubDate>
      <guid>https://blog.abartan.net/posts/chromecast-leaks-app-data/</guid>
      <description>How I discovered that Chromecast devices leak the name of the app being streamed to anyone on the same network via mDNS.</description>
    </item>
  </channel>
</rss>
