News
worse_query iOS sandbox escape: how the unpatched zero-day Escapes iOS Sandbox
Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
worse_query iOS sandbox escape: how the unpatched zero-day Escapes iOS Sandbox
worse_query is an unpatched iOS 26 and 27 sandbox escape. See how it works, what data it exposes, and how to protect yourself from this
Fireworks AI Breach: How Attackers Stole Model Weights in 2026
Fireworks AI confirmed attackers stole up to 7.69% of customer model weights via IAM role chaining. Timeline, LLMJacking link, ZDR and four fixes
Able2Shell: Inside the 33 Zero-Days That Forced N-able to Pull N-central Offline
Sean Bales published 33 unpatched N-able N-central flaws as Able2Shell. Here’s how the exploit chains work, and how to check if you were exposed
Operation Snowball: How an Autonomous DeepSeek AI Agent Breached a Telecom and a Healthcare Database
Operation Snowball reveals how an autonomous DeepSeek AI agent breached a telecom network and healthcare databases, exposing millions of sensitive records
Monday.com Down: Service Disruption Hits US Servers (Live Updates)
Is monday.com down? Monday.com confirms a service disruption on its US server at 15:16 UTC on Nov 9, 2026. Live status, affected regions, and what to do
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments