Corelight Bright Ideas Blog

Featured

See how a Black Hat Asia 2026 threat hunt traced rare cleartext HTTP/2 traffic to exposed cookies after repeated QUIC and TLS failures.

See how a Black Hat music trivia game exposed unencrypted traffic, weak validation, and the value of network visibility.

Corelight Labs reviewed a POC exploit for CVE-2022-30216 and wrote a Zeek-based detection and released the package on GitHub.

In this post, we share simple ways to detect evidence of CVE-2022-22954 in Zeek logs, which can be adapted to other data stores (e.g., a SIEM).

Have questions?