Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
PostgreSQL Security Update: 52 CVEs and a 22-Year-Old Bug
PostgreSQL 18.7, 17.12, 16.16, 15.20 and 14.25 fix 52 CVEs, including a 22-year-old type confusion bug. Rebuild extensions, reindex, reset backups
Uber Driver Data Breach: Inside the Fireworks AI Hack
Uber driver data breach: Fireworks AI was hit twice in October, exposing license data of 7,870+ drivers. Timeline, what leaked, LLMjacking, fixes
Check Point Gateway Hack: PHP2Shell, CVE-2026-123039 and the TSGA Backdoor
Check Point gateways were hit by PHP2Shell and CVE-2026-123039 root escalation, then TSGA backdoor and ESXi wipers. Get the IOCs, hotfixes and hunting steps
TSMC Data Breach: 46,000 Employee Records Allegedly Leaked Through a Cloud Vendor
TSMC says its systems weren’t compromised, yet employee data matched a cloud vendor’s records. See the 6-K, claimed 46,000 records, PDPA liability and fixes
CVE-2026-118383: The Pre-Auth MongoDB Use-After-Free That Crashes a New Primary During Failover
CVE-2026-118383 (CVSS 9.5) lets an unauthenticated client crash a new MongoDB primary during failover. Affected versions, root cause, detection, patching
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments