News
Name.com DNS Hijack: How Step Drainer Hit 12 DeFi Protocols Through the Registrar
Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
Name.com DNS Hijack: How Step Drainer Hit 12 DeFi Protocols Through the Registrar
A Name.com registrar compromise redirected 12 DeFi domains to Step Drainer on Oct 31, 2026. Timeline, how the drain works, and how to defend
Binance $6.3B Hack Explained: How EIP-7702 Exposed a Crypto Custody Flaw
The October 29, 2026 Binance breach drained about $6.3 billion. Here is how attackers abused EIP-7702, why HSMs could not stop it, and what exchanges must change
Claude Code Extension Backdoor on Open VSX: Analysis and IOCs
A trojanized anthropic.claude-code 2.1.313 on Open VSX planted an SSH backdoor and reverse tunnel. See how it works, the IOCs, and how to respond
Polymarket Frontend Hack: How a Third-Party Script Drained Wallets
A breakdown of the October 29, 2026 Polymarket frontend supply-chain attack: the DebugBear RUM script, the timeline, why CSP and SRI fell short, and how to defend
Coinbase Amplitude Breach: What the Third-Party Leak Exposed
Coinbase says no customer funds were affected by the Amplitude analytics breach. See the confirmed timeline, the exposed data and what remains unknown
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments