DSecRG covered offensive vulnerability research from 2009 to 2012. Exploit chains, primitives, JIT-Spray shellcoding, SAP and Lotus Domino tradecraft. Site went quiet around 2012 when the parent firm moved commercial focus elsewhere; name stayed dormant for over a decade.
DSecRG is back in 2026. New team, different people, no overlap with the original group’s later commercial work. Earlier team’s advisories, identifiers and author names stay with them; nothing here reproduces their material.
Small team. What we research is what we write. Coverage stays close to what was there originally — exploit chains, n-day reconstructions, supply-chain CVE work, the gap between a vendor patch and what real attackers do with it after.
Tips, corrections, or concerns about the name: [email protected].
Heritage scope
This is not a continuation of the 2009-2012 team’s work. Their research, advisories and names stay with them and with the firms that hosted that work. Site neither speaks for them nor reproduces their material.
Where a 2026 post revisits a 2009-2012 topic, the post is new writing on the same subject. Original research, where it survives, is linked at the Internet Archive in each such post.