ITSEC Newsletter 2025-09-25

Author

Henrik Falk
September 25, 2025

More Fun With WMI

TL;DR Win32_Process has been the go to WMI class for remote command execution for years. In this post we will cover a new WMI class that functions like Win32_Process and offers further capability.

specterops.io/blog/2025/09/18/more-fun-with-wmi

Automating Operations with Nighthawk

In June ‘24, we released Nighthawk 0.3; the main focus of this release was a major overhaul of our backend infrastructure. This included the addition of a JSON RPC web service API to support red teams in automating operational actions and to facilitate integration with other resources. Every component of the framework (beacon, artifacts and team servers) can be instrumented through the API. To our knowledge, this was the first time such features had been made available in a commercial C2 framework.

nighthawkc2.io/automating-operations

Electron Research in Desktop apps [Part 1]

What’s electron?, the design of electron desktop app, the story bug of the bug, the static code of the bug and how to find it, how to develop it and explain the code, explain how to discover it, mitigation, in this article we are going to discuss CVE i have found in 2022 and going through deep dive into the other methods to test your electron application.

blog.securelayer7.net/electron-app-security-risks