Some background. We do offensive security and we’re building a product that catches autonomous AI attackers on the perimeter. Short…

Introduction

If you’ve spent any time in penetration testing or home-lab hacking, you’ve probably heard people mention NFS shares as an “easy win.” This…

NIST and CISA are tightening token security, but AI agents expose a deeper problem: a valid token does not mean a valid action.

The documented unauthenticated endpoint had 1 query. The undocumented one had 7 queries and 7 mutations. One of those queries returned…

The next generation of cybersecurity may be powered by AI, but its effectiveness still depends on the fundamentals underneath it.

Pourquoi les dirigeants, banques, family offices et organisations publiques doivent traiter le BEC comme un risque d’identité, de…

Google’s Gemini AI has demonstrated a new and increasingly important cybersecurity capability: during a controlled security evaluation in…

I’ve been pentesting for a while now. Web apps, networks, APIs, the usual stuff you’d expect from someone doing this full time. So when I…

1. Ethical Considerations

My first hands-on experience with SQL injection on PortSwigger Web Security Academy

Earlier, the routine September 2026 update released by Microsoft caused multiple unexpected issues in Excel. For many office workers, this spreadsheet application remains a critically essential da…

Microsoft launched the Windows Server 2022 operating system back in March 2021. Currently, all Microsoft server platforms operate on the Long-Term Servicing Channel (LTSC). Consequently, the compa…

TL;DR Security researchers recently uncovered critical IBM MQ vulnerabilities impacting message processing systems. Specifically, these severe heap buffer overflows allow remote attackers to trigg…

CWE-640: Weak Password Recovery Mechanism CWE-613: Insufficient Session Expiration CVSS 3.1: 7.4 (High) —…

CWE-613: Insufficient Session Expiration CWE-287: Improper Authentication CVSS 3.1: 8.1 (High) — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Rate limiting is one of those controls that looks solid in a screenshot and falls apart the moment you understand what it’s actually…

Intro: The Wall