Welcome back to the newsletter in week 6.

---

WhiteKnightLabs writes about hollowing out Electron apps and the advantages this can bring in tightly controlled networks. Short but punchy.

• https://whiteknightlabs.com/2026/01/20/backdooring-electron-applications/

---

Sean Heelan actually provides numbers and code here on what it takes using agents to develop proof-of-concept exploits that didn’t previously have any known PoCs.

• https://sean.heelan.io/2026/01/18/on-the-coming-industrialisation-of-exploit-generation-with-llms/

In that context, this one’s also worth a read, even if it’s a bit older:

…

During a week I usually read some articles on varying topics. So why not provide them here as well with a short summary in hope someone finds this usefull.

---

I can’t say I understood everything, but I always find this kind of research fascinating. In the blog, Connor McGarr managed to send a “stop trace” to ETW using an undocumented security trace flag and they provide a pretty deep dive into it.

…

Automating vulnerble JavaScript detection with ZAP