Zerox insights

Ideas That Strengthen Security & Innovation.

Practical insights from the world of Cyber Security, Digital Forensics, ICS/OT, Secure AI, and technology.

Latest security insights

Application and database architecture showing how untrusted input can reach SQL queriesWeb & Application Security

SQL Injection Explained: Risks, Detection & Prevention

Understanding how SQL injection vulnerabilities arise, how security teams validate them, and how organisations can reduce their exposure.

August 2026 · 8 min readRead
Browser and application view showing how untrusted scripts can reach the page DOMWeb & Application Security

Cross-Site Scripting (XSS): Understanding the Risk & How to Prevent It

How XSS appears in web applications, why it matters to users and organisations, and the controls that prevent untrusted content from running in the browser.

August 2026 · 7 min readRead
Application server architecture showing a guarded boundary between user input and operating-system commandsWeb & Application Security

OS Command Injection: How It Happens & How to Prevent It

Why applications that pass user input into operating-system commands create high-impact risk, and the design choices that prevent it.

August 2026 · 6 min readRead
Web application requesting files through a restricted path rather than an open filesystemWeb & Application Security

Local File Inclusion: Risks, Detection & Prevention

How local file inclusion appears when applications use user-controlled paths, what testers look for, and how secure file handling prevents it.

August 2026 · 5 min readRead
Digital forensics workstation reviewing Windows registry and timeline evidenceDigital Forensics & Incident Response

Windows Forensics: A Practical Guide to Digital Evidence

How investigators reconstruct Windows activity from system information, registry artefacts, execution evidence, and user traces — and how that evidence should be interpreted.

August 2026 · 9 min readRead
Abstract visualisation of volatile memory analysis and process artefactsDigital Forensics & Incident Response

Memory Forensics: What Volatile Evidence Can Reveal

Why RAM captures matter in investigations, what analysts can recover from volatile memory, and where tools such as Volatility fit in a professional workflow.

August 2026 · 6 min readRead
Windows endpoint privilege layers from standard user to SYSTEM with service and task controlsEndpoint & Infrastructure Security

Windows Privilege Escalation: Common Misconfigurations Security Teams Should Know

How local privilege escalation appears on Windows — insecure services, weak permissions, scheduled tasks, and credential exposure — and what teams should fix first.

August 2026 · 8 min readRead

Need More Than an Insight?

Our security practitioners help organisations identify vulnerabilities, strengthen defences, investigate incidents, and build secure technology.