- Engineer — Learn: Novel lab research demonstrating code execution inside a Windows VBS enclave protecting SmartScreen credential data — no patch, no CVE, no exploitation signal yet, but worth understanding the attack surface if you rely on VBS enclaves for secrets isolation.
- SOC/IR — Learn: Pure research with no IOCs, no observed in-the-wild activity, and no detection surface described; file it as context for how VBS enclave isolation can fail, but no hunt or rule work is actionable today.
- Leader — Skip