According to CrowdStrike's report and other media coverage, hackers are using LLM-based penetration testing harnesses to hack web applications. In this article, I analyzed three open-source harnesses

Preface AWS announced the general availability of the AWS MCP Server on May 6, 2026. It is a managed remote Model Context Protocol (MCP) server.
An MCP server exposes certain tools/functions and lets your AI agent call them. It extends your AI agent’s capabilities.…

We tested Context Bombs against seven AI models, measuring how deceptive documents, false leads and recovery tasks change attacker time, cost and completed objectives.

The AI RCEssion is driven by tech debt, but that debt is not evenly distributed. As vulnerabilities rise its time for a return to the basics.

A victim asked for /account and got the attacker's marker back, on a backend socket the proxy believed was clean. Ten products reuse a connection where the previous request is not finished, and reuse is not the defect. Turning it off takes the crossings to…

How to intercept and edit HTTP/3 traffic. Learn what a proxy sees on QUIC streams, how QPACK hides headers, and how to edit and replay requests, tested in a real lab.

We solve the world’s toughest cyber challenges—creating breakthrough technology and embedding it into the systems that run everything.

A .po translation file is meant to be data. In Godot 4.1 and later, part of it is executed as code (the chain is present in the engine source from 4.1; I confirmed it at runtime on 4.7). A player...

A vulnerability in Telerik UI for ASP.NET AJAX led to an arbitrary file read via RadImageEditor's image cache. Leaking web.config turned it into RCE.

This article explores how ESC17 certificate abuse revives an old GLPI agent tactic, enabling attackers to achieve RCE without needing access to the GLPI server.

The Gentlemen uses a double-extortion model. In addition to encrypting files, the ransomware can exfiltrate data from compromised systems. This puts additional pressure on victims to pay the ransom to restore access to their files and prevent the stolen data…

GhostAction pushed 72,026 commits to 22,964 repos in nine days, now targeting CI runners and developer machines with a launcher copied from PolinRider.

A fun new Kerberos abuse path!

ElectroNG is now free and open source! Today we are releasing both the desktop application and its core analysis engine under the Apache License 2.0, opening up years of Doyensec’s work on Electron application security to the community.

Walking through the Xen, Linux, and toolstack changes that let a paravirtualized guest own an IOMMU-backed PCI device—TPU and NVIDIA GPU alike.

Joining a multiplayer server is an ordinary player action. In Godot 4.0 and later, in games using the engine's standard spawning setup, a peer with authority over the relevant spawner — by default the...

The New Prompt Injection: Vulnerable Dependency Seeding

We achieved XSS through Cloudflare's /cdn-cgi/image/ endpoint by chaining an SVG sanitizer bypass with a Chromium Cache-Control trick that strips CSP. The same trick also works on Netlify and S3.

Author: Vlad Pasca   Executive Summary SEO poisoning campaign targets DeepSeek AI tool searchers through first-page malicious domains. Multi...