Description : Compare traditional workflows, AI workflows, assistants, and agents for a security-alert problem.

Objective

When Short Links Betray You: Open Redirect via Deep Link Misconfiguration

Overview

The detail that got me wasn’t that an AI agent breached a security system. It was that the system belonged to a gym.

Overview

When Short Links Betray You: Open Redirect via Deep Link Misconfiguration

Tumblr-Recovery-At-SmatchoiceHackers

How a RockYou password and one predictable “make-it-complex” tweak gave up an MD5 flag after I wasted an hour hunting for Santa.

This Blogpost shows how an LLM information leak, broken FTP isolation, native reverse engineering, and an affine cipher turned a protected…

How information disclosure, weak credentials, and an outdated Linux kernel can be chained into a full system compromise.

Hacker Holidays 2026 — Day 11| Infinity Pool | Tryhackme Walkthrough This write-up covers the complete attack path through the Infinity Pool room, starting with external reconnaissance and ending …

Hacker Holidays 2026 — Day 12: After Hours Walkthrough Day 12 was a little different from the previous rooms. Instead of immediately throwing Nmap or Burp at something, we were given a bunch of …

It has been a while since my last blog post, not because I didn’t do anything (or I?), I just don’t have any time/ any motivation to start…

TL;DR WordPress released version 7.0.4 on August 12, 2026, as a security-only update. It fixes CVE-2026-65640, an authenticated remote code execution flaw rated CVSS 8.8. The bug affects sites tha…

At a glance Malware family ChainDrop (Shai-Hulud code lineage) Threat actor Unattributed; possible link to TeamPCP (not confirmed) Targets Developer workstations, CI pipelines, cloud environments …

At a glance Malware family Overlord (open-source RAT framework) Threat actor Unattributed (suspected DPRK links noted, not confirmed) Target macOS and Windows users Delivery vector Fake Zoom insta…

Unauthenticated API queries exposed sensitive user data and enabled enumeration of the application’s entire observed userbase.

How a seemingly simple input-validation issue turned into a real-world phishing and malicious-redirection scenario.

Ever wonder why attackers can waltz right past the latest Endpoint Detection & Response (EDR) tools — no malware needed? Here’s the wild…