Glossary
BGP Hijacking: How Attackers Redirect Internet Traffic and How to Stop Them
Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
SMBC Consumer Finance Data Breach 2026: How a Shared Loan Guarantee Platform Exposed 320,118 Japanese Bank Customers
SMBC Consumer Finance’s November 2026 breach exposed up to 320,118 customers at Japanese banks. See what leaked, who was hit and more
OpenSSH’s *sshole Bug: How a One-Byte Collision Let Attackers Skip the Password on musl-Based Linux Systems
OpenSSH 10.6p2 fixes *sshole, an auth bypass on musl and Alpine Linux. Learn how it works, who’s affected, and how to check, patch, and hunt for compromise
CVE-2026-109518: APT Download Verification Bypass Explained
CVE-2026-109518 lets an on-path attacker overwrite a verified .deb via hard links, redirects, and retries. Fixed in apt 3.0.4. Patch steps and more
ACF Extended PRO CVE-2026-120534: Unauthenticated RCE and the Patch That Wasn’t Enough
CVE-2026-120534 lets unauthenticated attackers run code through ACF Extended PRO. Version 0.9.2.7 is not a safe fix. Here is everything about it
Rails Active Storage ImageMagick Flaw: CVSS 9.8 Fix Guide
Rails 8.1.4.1 and 8.0.5.2 fix GHSA-f3w6-w445-fwh9, a CVSS 9.8 Active Storage flaw. See who is exposed, how to patch, and how to fix
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments