The Anvil Signal

Sign up to receive the latest technical research, tool releases, whitepapers, and security insights from our team.

No spam. Unsubscribe anytime.

Recent Research & Insights
Illustration of a satellite in orbit sending three dashed signal beams down to points on a glowing blue Earth at night, representing ION-DTN security research.
You Wouldn’t Hack a Satellite: Unbundling NASA’s ION-DTN
October 8, 2026
Senior Security Engineer Riccardo Nannini shares how he fuzzed NASA's ION-DTN, the software behind delay-tolerant networking in space, and uncovered critical vulnerabilities that led to a series of security advisories.
Graphic novel-style illustration of a hammer striking an anvil, sending orange sparks across a dark blue background, with the text “Field Notes – Issue 1.”
Predictable Usernames and Passwords | Field Notes, Issue 1
October 5, 2026
During a code review of a healthcare platform's temporary account system, we found predictable usernames and passwords generated from the same weak random string. Read why the two weren't actually independent, and why fixing the RNG wouldn't have solved it.
Glowing blue padlock cracking and breaking apart against a dark blue digital grid and particle background.
Demystifying Passkeys — Under Attack (Whitepaper)
October 1, 2026
In Part 3 of a three-part series, Security Engineer Matteo Giordano maps the passkey attack surface in a downloadable whitepaper, covering authenticators, hybrid transport, clients, relying parties, sync fabric, and recovery, plus a test-case reference for pentesters.
Magnifying glass examining a stream of glowing blue data particles, representing close inspection of network traffic
Introducing PQCDump: A Real Look at PQC Adoption
September 9, 2026
Senior Security Engineer Nicholas O'Shea introduces PQCDump, a passive analysis tool that parses SSH and TLS captures to show what post-quantum algorithms were actually negotiated, not just advertised, giving a fuller picture of real-world PQC adoption than active scanning alone.
Illustration of a satellite in orbit sending three dashed signal beams down to points on a glowing blue Earth at night, representing ION-DTN security research.
You Wouldn’t Hack a Satellite: Unbundling NASA’s ION-DTN
October 8, 2026
Senior Security Engineer Riccardo Nannini shares how he fuzzed NASA's ION-DTN, the software behind delay-tolerant networking in space, and uncovered critical vulnerabilities that led to a series of security advisories.
Graphic novel-style illustration of a hammer striking an anvil, sending orange sparks across a dark blue background, with the text “Field Notes – Issue 1.”
Predictable Usernames and Passwords | Field Notes, Issue 1
October 5, 2026
During a code review of a healthcare platform's temporary account system, we found predictable usernames and passwords generated from the same weak random string. Read why the two weren't actually independent, and why fixing the RNG wouldn't have solved it.
Glowing blue padlock cracking and breaking apart against a dark blue digital grid and particle background.
Demystifying Passkeys — Under Attack (Whitepaper)
October 1, 2026
In Part 3 of a three-part series, Security Engineer Matteo Giordano maps the passkey attack surface in a downloadable whitepaper, covering authenticators, hybrid transport, clients, relying parties, sync fabric, and recovery, plus a test-case reference for pentesters.
Magnifying glass examining a stream of glowing blue data particles, representing close inspection of network traffic
Introducing PQCDump: A Real Look at PQC Adoption
September 9, 2026
Senior Security Engineer Nicholas O'Shea introduces PQCDump, a passive analysis tool that parses SSH and TLS captures to show what post-quantum algorithms were actually negotiated, not just advertised, giving a fuller picture of real-world PQC adoption than active scanning alone.
Illustration of a satellite in orbit sending three dashed signal beams down to points on a glowing blue Earth at night, representing ION-DTN security research.
You Wouldn’t Hack a Satellite: Unbundling NASA’s ION-DTN
October 8, 2026
Senior Security Engineer Riccardo Nannini shares how he fuzzed NASA's ION-DTN, the software behind delay-tolerant networking in space, and uncovered critical vulnerabilities that led to a series of security advisories.
Graphic novel-style illustration of a hammer striking an anvil, sending orange sparks across a dark blue background, with the text “Field Notes – Issue 1.”
Predictable Usernames and Passwords | Field Notes, Issue 1
October 5, 2026
During a code review of a healthcare platform's temporary account system, we found predictable usernames and passwords generated from the same weak random string. Read why the two weren't actually independent, and why fixing the RNG wouldn't have solved it.
Glowing blue padlock cracking and breaking apart against a dark blue digital grid and particle background.
Demystifying Passkeys — Under Attack (Whitepaper)
October 1, 2026
In Part 3 of a three-part series, Security Engineer Matteo Giordano maps the passkey attack surface in a downloadable whitepaper, covering authenticators, hybrid transport, clients, relying parties, sync fabric, and recovery, plus a test-case reference for pentesters.
Magnifying glass examining a stream of glowing blue data particles, representing close inspection of network traffic
Introducing PQCDump: A Real Look at PQC Adoption
September 9, 2026
Senior Security Engineer Nicholas O'Shea introduces PQCDump, a passive analysis tool that parses SSH and TLS captures to show what post-quantum algorithms were actually negotiated, not just advertised, giving a fuller picture of real-world PQC adoption than active scanning alone.

View all research →