Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
PSN Account Hack: Why Passkeys and 2FA Didn’t Stop It
Passkeys and 2FA didn’t stop recent PSN account hack. See how weak support recovery and family-group flaws bypass strong authentication
ns2jb explained: the software-only exploit chain that broke the Nintendo Switch 2’s trust boundary
A technical walkthrough of ns2jb, the software-only Nintendo Switch 2 jailbreak: a SmileBASIC 4 overflow, an fs heap bug, and a TOCTOU trust bypass
CVE-2026-80097: How a Microsoft Authenticator Android Flaw Let Any App Steal Work Tokens
CVE-2026-80097 let a zero-permission Android app steal Microsoft Authenticator tokens. See how the broker bypass worked, how to hunt for abuse, and how to fix it
Tailworm and Tailscale SSH: How Root-Run Unix Socket Forwarding Breaks Privilege Separation
Breakdown of the Tailworm report on Tailscale SSH: root-run Unix socket forwarding, TOCTOU races, Docker socket abuse, and how to fix the privilege model
CVE-2026-91403: How eMudhra’s Weak CA Keys Broke Java TLS Trust
Learn how CVE-2026-91403 exposed Java TLS to forged certificates through weak eMudhra CA keys, cross-signing risks, and JSSE trust failures
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments