Research & news

As Gulf states activated civil-defense sirens, Dream researchers found an Android app impersonating an official alert tool to turn phones into listening posts.

Dream reaches $3 billion valuation, building the sovereign AI infrastructure that governments fully own.

The DREAM Security Research Team has identified a critical security vulnerability in Samba's Group Policy certificate auto-enrollment extension.

UAE’s focus shifts from AI adoption to securing national digital control

Dream's research team found four vulnerabilities in ScadaBR 1.2.0, an open-source SCADA platform, allowing unauthenticated remote code execution.

Dream researcher Arad Inbar at Black Hat Asia on using protocol specifications — RFCs — as a primary surface for vulnerability discovery.

Reverse engineering the binaries before and after a patch reveals what it actually fixes. A binary diff of Microsoft's local NTLM relay mitigation.

Security teams are paid to be paranoid and won't trust what they can't audit. Six lessons from building an explainability layer into an AI security agent.

A bug in Telnet's early-1990s LINEMODE logic survived into modern GNU Inetutils telnetd, leaving pre-auth memory corruption reachable before /bin/login.

The Sovereign Pivot: Why Governments are Rebuilding Control Over Their AI Infrastructure

A vulnerability scanner trusted to protect a CI pipeline was the entry point. An AI proxy holding LLM API keys was the target. The cascade didn't stop there.

AI collapsed the cost of code. The bottleneck is no longer writing it — it's designing the system the code will live inside.