Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
Tailworm and Tailscale SSH: How Root-Run Unix Socket Forwarding Breaks Privilege Separation
Breakdown of the Tailworm report on Tailscale SSH: root-run Unix socket forwarding, TOCTOU races, Docker socket abuse, and how to fix the privilege model
CVE-2026-91403: How eMudhra’s Weak CA Keys Broke Java TLS Trust
Learn how CVE-2026-91403 exposed Java TLS to forged certificates through weak eMudhra CA keys, cross-signing risks, and JSSE trust failures
AI Agents in Banking: Why Agentic Finance Broke the Authentication Model
U.S. banks face new AI agent security risks as autonomous tools access customer accounts. Explore authentication gaps, prompt injection, OAuth, MCP and defenses
Linux Kernel Vulnerabilities, October 2026: The ZDI Disclosure Sequence Explained
Linux kernel security disclosure controversy explained: ZDI reports, public mailing lists, unpatched vulnerability concerns, responsible disclosure and kernel maintainer challenges
CAPCOM ID Breach: 11.7 Million Records Exposed and 196 Passwords Changed
Capcom confirmed a CAPCOM ID breach exposing 11.8M records and 196 unauthorized password changes. What leaked, how it may have happened, and what to do
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments