Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
Monday.com Down: Service Disruption Hits US Servers (Live Updates)
Is monday.com down? Monday.com confirms a service disruption on its US server at 15:16 UTC on Nov 9, 2026. Live status, affected regions, and what to do
Sega Data Breach 2026: How the Arara Supply-Chain Attack and PHP2Shell Exposed 81 Million Email Addresses
Sega confirmed 2,196,044 leaked email addresses after the Arara Message breach. See how PHP2Shell (CVE-2026-109618, CVE-2026-109619) led to 97-server lateral movement and 7.13 million phishing emails
SMBC Consumer Finance Data Breach 2026: How a Shared Loan Guarantee Platform Exposed 320,118 Japanese Bank Customers
SMBC Consumer Finance’s November 2026 breach exposed up to 320,118 customers at Japanese banks. See what leaked, who was hit and more
OpenSSH’s *sshole Bug: How a One-Byte Collision Let Attackers Skip the Password on musl-Based Linux Systems
OpenSSH 10.6p2 fixes *sshole, an auth bypass on musl and Alpine Linux. Learn how it works, who’s affected, and how to check, patch, and hunt for compromise
CVE-2026-109518: APT Download Verification Bypass Explained
CVE-2026-109518 lets an on-path attacker overwrite a verified .deb via hard links, redirects, and retries. Fixed in apt 3.0.4. Patch steps and more
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments