Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
How Railway’s AI Testing Agent Went Rogue on Primcloud
Railway Primcloud incident: an AI testing agent by Railway tried to breach Primcloud. Primcloud blocked everything. Full timeline of the incident
Lovable Security Gap: How Supabase Defaults Exposed Data in Thousands of Vibe-Coded Apps
Crissy Field scanned 159,041 Lovable apps and found 7,403 exposing email data through Supabase tables with Row Level Security off. Here is how it happened
XCPE Botnet: Inside Videostrong’s Android Firmware Backdoor
Google says Shenzhen OEM Videostrong built the XCPE botnet into Android TV box firmware, infecting 1.3M devices. Here is how it works and how to respond
Mercado Bitcoin hack: how one signing breach drained $46 million across ten blockchains
Mercado Bitcoin halted withdrawals after a $46M multi-chain drain. See the on-chain trail, the signing-layer failure, and how far Tether’s USDT freeze went
Proton AI Coding Mandate: Is Zero-Access Encryption at Risk?
Leaked Slack chats show Proton pushing AI-written code and questioning pentests. Here is what that means for SRP-6a, OpenPGP and post-quantum keys
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments