n8n uses a user-supplied schema name as a bare object key. Set it to __proto__, pollute the prototype, chain into RCE via the Git node. One request, full shell.

Technical writeup for CVE-2026-6837 covering the PKCS#12 export command-injection path, proof, affected models, and full emulation workflow.

Don’t miss the AMA with Black Hat speakers Lidor B.

The actual bug isn't the interesting part in this case, it was the vendor's response - although it's crazy that we're still finding SQL injection in 2026.

ChatMate, the first documented instance of remote prompt execution, shows how a malicious document can lead to sandbox escape.

Remedio discovered an unauthenticated RCE flaw in CircleCI's MCP server allowing for full pipeline takeover. Learn how and why it matters »

I found a cute game about refusing birds. So I told Codex it was a CTF, and it stopped playing by the rules

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications, negotiations, and data leak operations alongside double extortion…

My seven phase forensics process for investigating suspicious Git repositories: preserving evidence, analysing patch content and committer identity, confirmi...

Hunt.io recovered a single operator's toolkit from an open directory: 14,530+ Dahua cameras compromised across Ukraine and Russia in 35 days. Inside the campaign

AI agents take orders from other AI agents. Mine won't. Try to break it.

Posted by Fit_Veterinarian4403 - 0 votes and 0 comments

Kimi Desktop's Windows group-chat updater downloads an executable and agent instructions from mutable locations without enforcing Moonshot's code signature.

Burp Suite is built for HTTP. When you're testing a thick client that speaks raw TCP, TLS, or a custom binary protocol, you need a different tool. Here's how to intercept non-HTTP thick client traffic with InterceptSuite.

What the Agent attempted with DNS in the Hugging Face–OpenAI Intrusion Incident of July 2026

This will be mostly rambling disguised as a technical walkthrough. I will touch on certain topics such as hardware roots of trust, signed image formats, Qualcomm boot stages, Android Verified Boot, UEFI, measured boot, and remote evidence (remote attestation).…

Abstract In this paper we’ll show that HTTP Header Injection is severely underestimated. Forget open redirects or Cross-Site Scripting and instead, embrace the catastrophic potential of the CRLF-Power

Disclosure: this research was conducted using an ANY.RUN account provided as part of a collaboration. All analysis and conclusions are my own.
TLDR Found an unreported Silver Fox campaign serving ValleyRAT to Indian taxpayers with a fake “GSTR-3B overdue”…

wasm2c sets a table's size from the element count the guest declared, then ignores whether the allocation succeeded. Make it fail and every table index becomes an absolute address on the host.