SRA explored jailbreaking the iPhone 11 Pro Max with usbliter8. This post details our setup, investigation of SEP-related kernel panics, and changes to improve device stability for mobile application security research.

SRA’s highlights from DEFCON 34

SRA has identified a SQL injection vulnerability in Ellucian Advance Web and Legacy Advance.

SRA identified and disclosed several vulnerabilities in Sangoma Switchvox SMB. This post explains the technical details for each of the four CVEs.

SRA has identified multiple vulnerabilities in VSee Clinic that can lead to unauthorized access to and deletion of files as well as exposure of SFTP credentials.