Some days in Ash’s journey were full of battles.

Most detection still sounds like this:

There was a time when I thought learning to code was the destination.

A lot of OSINT workflows still rely on chaining together tools that were built for completely different jobs.

From manual QA tester to writing my own recon and security tooling — a practical breakdown of what I built, why, and what surprised me.

How Blue Teams Can Detect Attacks Against AI Agents

How Blue Teams Can Detect Attacks Against AI Agents

Refactoring HTTPHeaderHunter into a modern, async, and pip-installable Python package for AppSec professionals.

Researchers have demonstrated that certain ideas and goals can propagate between AI agents. The result is interesting, unusual, and worth…

A few weeks ago I had one Python script. It sent path traversal payloads at a URL parameter and printed whatever it found. It worked, and…

Task 1 — Introduction

How arbitrary authentication exposes low-interaction honeypots across SSH, FTP, and IMAP — and how to prove it safely.

Netskope Threat Labs found a major upgrade to the Python NodeStealer malware in August 2026. The Facebook-focused infostealer now works as full spyware. It logs keystrokes, watches the clipboard, …

For roughly two weeks in August 2026, developers ran into a wave of PyPI file hosting errors that broke package installs. Users hit intermittent 502 and 503 responses when pip tried to pull files …

I Found a Tiny Filename Bypass That Broke a “Safe” Loader — and Earned $ $$$ السلام عليكم ورحمة الله وبركاتة Sometimes the best security findings start with a …

By Sourav Bouri | B.Tech CSE (IOT CS BCT) Student | Cybersecurity Enthusiast

A deep dive into TENET — an AI-assisted Command & Control platform that brings enterprise-grade security, real-time agent management, and…

Deception technology has evolved past static string matches. Modern decoys try to mimic production environments, making binary “is it a…