News
GoAhead TLS Vulnerabilities Explained: CVE-2026-115881 and CVE-2026-115884
Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
GoAhead TLS Vulnerabilities Explained: CVE-2026-115881 and CVE-2026-115884
Three GoAhead embedded web server TLS vulnerabilities, explained with code: a missing CRL check, a chain-depth bypass and a one-byte DH prime. Fixed in 6.1.1
CVE-2026-97631: How a 16-Year-Old EDK II PXE Bug Exposes UEFI Firmware Before the OS Loads
CVE-2026-97631 is a CVSS 9.5 EDK II PXE flaw that lets a LAN attacker corrupt UEFI firmware before Secure Boot. Impact, root cause and fixes
PSN Account Hack: Why Passkeys and 2FA Didn’t Stop It
Passkeys and 2FA didn’t stop recent PSN account hack. See how weak support recovery and family-group flaws bypass strong authentication
ns2jb explained: the software-only exploit chain that broke the Nintendo Switch 2’s trust boundary
A technical walkthrough of ns2jb, the software-only Nintendo Switch 2 jailbreak: a SmileBASIC 4 overflow, an fs heap bug, and a TOCTOU trust bypass
CVE-2026-80097: How a Microsoft Authenticator Android Flaw Let Any App Steal Work Tokens
CVE-2026-80097 let a zero-permission Android app steal Microsoft Authenticator tokens. See how the broker bypass worked, how to hunt for abuse, and how to fix it
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments