Introduction

WebGPU Gives Websites Access to Your GPU. So Why Can’t a Page Read Your VRAM?

Views are my own(I have reports pending on Com Olho, so technically I’m a shareholder in their backlog)

Complete PoC included. Build the vulnerable app, run the exploit yourself, watch the token get stolen, then patch it. Every command, every…

Three nights, a lot of coffee, and one SQL injection that refused to stay small.

I spent years ignoring XML parsers. Then I found an XXE vulnerability that exposed an entire company’s internal network. Here’s how to find…

Seven investigations. One certificate. Here’s what every module taught me about real SOC work.

A critical 10.0 CVSS bug in Ruflo's MCP bridge let attackers gain full shell access with zero login. Here's what every AI builder needs to know.

Weighing the career benefits against the mental toll of doom-scrolling

Assume someone hostile is paying attention.