### 2023

- ### [Green Team Tree Planting at Ōwhiro Bay](/content/research/insights/green-team-june-planting-day/index.html)
  
 26th June 2023
  
 ZX Green Team gets muddy planting native trees.

- ### [ZX Hosts 10 Brandon Street Green Team meeting](/content/research/insights/green-team-hosting-brandon/index.html)
  
 20th June 2023
  
 Last month ZX hosted the 10 Brandon Street Green Team meeting bringing together Green Teams from other companies in our building to share sustainability ideas.

- ### [Setting off on our carbon neutral journey](/content/research/insights/carbon-journey/index.html)
  
 27th February 2023
  
 We are thrilled to announce that we have officially set off on our carbon neutral journey with Toitū Envirocare!

### 2022

- ### [Running a runZero (rumble.run) Rumbler for Zero Dollars](/content/research/insights/run-zero-credentials-capture/index.html)
  
 10th November 2022
  
 How to take advantage of the normal way users deploy runZero asset discovery to capture credentials

- ### [Green Team May Beach Clean Up](/content/research/insights/green-team-may-beach-day/index.html)
  
 22nd June 2022
  
 This past May the ZX Green Team went out on a mission to tidy up local shores.

- ### [Customising Blacklist3r for OWIN OAuth Access Tokens](/content/research/insights/blacklist3r-customisation/index.html)
  
 19th January 2022
  
 Using a modified version of Blacklist3r, we managed to bypass authentication in OWIN

### 2021

- ### [Hacking for Heroes will return…](/content/research/insights/hacking-for-heroes-will-return/index.html)
  
 14th December 2021
  
 We’re excited to announce that Hacking for Heroes will return in 2022

- ### [Reverse engineering BMC PATROL Agent for static keys and IVs](/content/research/insights/reverse-engineering-bmc-patrol-agent/index.html)
  
 16th July 2021
  
 A dive into BMC PATROL Agent and the security issues within.

- ### [All my Intune users could become Local Administrators and it's a Feature?](/content/research/insights/intune-local-admin/index.html)
  
 19th March 2021
  
 An investigation into how Intune allows users to escalate their privilege to become a local administrator.

- ### [Microsoft GovTech presentation - Azure Security Faux Pas](/content/research/insights/microsoft-govtech-presentation/index.html)
  
 18th March 2021
  
 Blaise St-Laurent presented to the Microsoft GovTech forum on the 18th of March 2021 on the various mistakes, misconfigurations and missteps that ZX Security has seen in the last 2 years’ Azure security reviews.

### 2020

- ### [AWSUG Presentation - AWS Security Faux Pas](/content/research/insights/awsug-presentation/index.html)
  
 4th November 2020
  
 Blaise St-Laurent presented to the Aotearoa AWS Users Group on Tuesday the 10th of November 2020 on the various mistakes, misconfigurations and missteps that ZX Security has seen in the last 2 years’ AWS security reviews.

### 2019

- ### [Service Workers](/content/research/insights/service-workers/index.html)
  
 8th August 2019
  
 Claudio Contin was interviewed by the Daily Swig regarding his research into registering malicious service workers.