Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
ns2jb explained: the software-only exploit chain that broke the Nintendo Switch 2’s trust boundary
A technical walkthrough of ns2jb, the software-only Nintendo Switch 2 jailbreak: a SmileBASIC 4 overflow, an fs heap bug, and a TOCTOU trust bypass
CVE-2026-80097: How a Microsoft Authenticator Android Flaw Let Any App Steal Work Tokens
CVE-2026-80097 let a zero-permission Android app steal Microsoft Authenticator tokens. See how the broker bypass worked, how to hunt for abuse, and how to fix it
Tailworm and Tailscale SSH: How Root-Run Unix Socket Forwarding Breaks Privilege Separation
Breakdown of the Tailworm report on Tailscale SSH: root-run Unix socket forwarding, TOCTOU races, Docker socket abuse, and how to fix the privilege model
CVE-2026-91403: How eMudhra’s Weak CA Keys Broke Java TLS Trust
Learn how CVE-2026-91403 exposed Java TLS to forged certificates through weak eMudhra CA keys, cross-signing risks, and JSSE trust failures
AI Agents in Banking: Why Agentic Finance Broke the Authentication Model
U.S. banks face new AI agent security risks as autonomous tools access customer accounts. Explore authentication gaps, prompt injection, OAuth, MCP and defenses
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments