The ByteRay Blog.

The Drift Corpus: An Open Dataset of Windows Kernel Patch Analyses

The Drift Corpus is an open dataset of Windows kernel patch analyses. It currently contains 200+ entries from 2026, each recording which functions a Microsoft update changed, which of those changes are security relevant, and the vulnerability class they imply.

A 27-Year-Old Authentication Bypass in OpenBSD's PPP Stack

OpenBSD's sppp_pap_input function used attacker-controlled length fields as the bcmp comparison length for credential validation. Sending zero-length name and password fields caused bcmp to return 0 unconditionally, bypassing PAP authentication entirely. The vulnerability was introduced in 1999 and survived for 27 years before being fixed.