https://blog.1sec.day/en-gb/tags/threat-intelligence/ Recent content in Threat Intelligence on 思安录 | Thinking's Security Notes Hugo -- gohugo.io en-gb Thinking Thinking Wed, 15 Jul 2026 00:00:00 +0000 https://blog.1sec.day/en-gb/posts/2026-07-15-telegram-desktop-local-session-reuse/ Wed, 15 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2026-07-15-telegram-desktop-local-session-reuse/ <blockquote> <p>The reproduction result exceeded what I understood to be possible. Telegram&rsquo;s device authentication — phone verification, SMS code, 2FA password — seemed, to me, well-designed and complete. But when the tdata directory was copied to another Mac and the client launched, the login screen never appeared. This was not 2FA being cracked. The entire reuse path never entered a stage where credentials were requested.</p> </blockquote> https://blog.1sec.day/en-gb/posts/2025-02-23-lazarus-apt-attack/ Sun, 23 Feb 2025 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2025-02-23-lazarus-apt-attack/ <blockquote> <p>Cybersecurity is a war of endurance. This article is co-authored by me (Thinking) and 23pds.</p> </blockquote> https://blog.1sec.day/en-gb/posts/2024-05-31-aggr-malicious-chrome-extension/ Fri, 31 May 2024 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2024-05-31-aggr-malicious-chrome-extension/ https://blog.1sec.day/en-gb/posts/2022-08-20-celer-network-bgp-hijacking/ Sat, 20 Aug 2022 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2022-08-20-celer-network-bgp-hijacking/ https://blog.1sec.day/en-gb/posts/2022-08-04-solana-massive-theft/ Thu, 04 Aug 2022 00:00:00 +0000 Thinking https://blog.1sec.day/en-gb/posts/2022-08-04-solana-massive-theft/