Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
Claude Code Extension Backdoor on Open VSX: Analysis and IOCs
A trojanized anthropic.claude-code 2.1.313 on Open VSX planted an SSH backdoor and reverse tunnel. See how it works, the IOCs, and how to respond
Binance $6.3B Hack Explained: How EIP-7702 Exposed a Crypto Custody Flaw
The October 29, 2026 Binance breach drained about $6.3 billion. Here is how attackers abused EIP-7702, why HSMs could not stop it, and what exchanges must change
Polymarket Frontend Hack: How a Third-Party Script Drained Wallets
A breakdown of the October 29, 2026 Polymarket frontend supply-chain attack: the DebugBear RUM script, the timeline, why CSP and SRI fell short, and how to defend
Coinbase Amplitude Breach: What the Third-Party Leak Exposed
Coinbase says no customer funds were affected by the Amplitude analytics breach. See the confirmed timeline, the exposed data and what remains unknown
GoAhead TLS Vulnerabilities Explained: CVE-2026-115881 and CVE-2026-115884
Three GoAhead embedded web server TLS vulnerabilities, explained with code: a missing CRL check, a chain-depth bypass and a one-byte DH prime. Fixed in 6.1.1
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments