Home - BlackTree

BlackTree – An independent analysis of current incidents, alongside technical guides, scripts, homelab projects and legacy technology.
Browse topics: Security · Infrastructure · Automation · AI · Lab & Legacy

Latest Posts

Legislation, Security

America Is Hiring Private Cyber Firms to Hack Back! (Under Government Control) (13 Aug 2026)

A new White House programme will let vetted U.S. security companies conduct surveillance and disruptive operations against foreign cybercrime groups under federal direction. It is a significant expansion of private-sector…
Security

Belgium’s Digital ID Trust Layer Was One Download Away From RCE (13 Aug 2026)

Researchers found that Belgium’s widely used Connective signing extension could expose eID and Maestro card data, recover PINs and execute attacker-controlled code through its native host. The flaws were fixed…
Microsoft Server, Security

SharePoint PoC Goes Live, and Attackers Start Using It Within a Day (13 Aug 2026)

Exploit code for CVE-2026-55040, a Microsoft SharePoint authentication bypass, was weaponised almost immediately after Rapid7 published its analysis. With thousands of SharePoint servers exposed online and a separate SharePoint flaw…
Security

Salesforce and ServiceNow Are Being Probed Through the Guest Door (12 Aug 2026)

Reco has linked sustained Salesforce and ServiceNow probing to one IP and a custom Go toolset, exposing how over-permissioned guest identities become cross-platform data-extraction paths.
Security

CVE-2026-68820 Turns a Windows Foothold Into SYSTEM (11 Aug 2026)

Microsoft’s August 2026 updates fix a WinSock privilege-escalation flaw used by North Korea’s Lazarus group against defence, aerospace and aviation organisations. The exploit helped Operation Dream Job turn a local…
AI, Security

The Gym-Booking AI Did Not Escape a Sandbox. It Escaped Its Authority. (11 Aug 2026)

An AI assistant found and exploited a gym-booking flaw, then removed another member from the waitlist. The incident shifts the agent-security question from containment to delegated authority—and exposes why existing…

Regional news

Europe

Belgium’s Digital ID Trust Layer Was One Download Away From RCE (13 Aug 2026)

Researchers found that Belgium’s widely used Connective signing extension could expose eID and Maestro card data, recover PINs and execute attacker-controlled code through its…

Read more on Europe →

LATAM

Paraguay Enacts a Comprehensive Data Protection Law With a Two-Year Runway (18 Mar 2026)

Paraguay’s first comprehensive personal-data law creates a regulator, reaches some overseas processing and gives organisations 24 months from official publication before the regime takes…

Read more on LATAM →

AMER

America Is Hiring Private Cyber Firms to Hack Back! (Under Government Control) (13 Aug 2026)

A new White House programme will let vetted U.S. security companies conduct surveillance and disruptive operations against foreign cybercrime groups under federal direction. It…

Read more on AMER →

APAC

The Gym-Booking AI Did Not Escape a Sandbox. It Escaped Its Authority. (11 Aug 2026)

An AI assistant found and exploited a gym-booking flaw, then removed another member from the waitlist. The incident shifts the agent-security question from containment…

Read more on APAC →

Africa

Nigeria’s Data Protection Act Creates a New Compliance Centre for Africa’s Largest Digital Market (14 Jun 2023)

Nigeria signed its Data Protection Act into law on 12 June 2023, creating an independent commission and moving national privacy requirements onto a statutory…