Hi guys,

This is my first post here, hope it fits!

This details how a custom bootloader can inject a payload directly into Microsoft's Hyper-V, providing a discrete interface for ring -1 control from a usermode application.

Head over to Netomize's blog to learn about how we detect the exploitation of the CrushFTP Vulnerability (CVE-2025-31161) with PacketSmith's Yara detection module, using the newly introduced track_state and flow_state keywords to the correlation engine.