The CyberSec Guru
Proton’s Privacy Promise Has an Asterisk: what 40,000 government orders actually tell us
Proton’s privacy claims face scrutiny as 40,389 complied government orders, metadata exposure, IP logging, and MLAT cases reveal the limits of it
PSN’s One-Letter Username Glitch: What Actually Happened Under the Hood
A PSN glitch let users claim single-letter usernames blocked since 2006. Here's the validation failure behind it and what Sony will likely do next
The Instructure Canvas Breach (2026): How a Single Support Ticket Exposed 275 Million Students
The Instructure Canvas breach exposed 275M students through stored XSS, hijacked sessions, weak CSP, and ShinyHunters’ large-scale data theft
The VPN Authentication Bypass That Let Ransomware Actors Walk Right In: A Deep Dive into CVE-2026-50751
CVE-2026-50751 is a CVSS 9.3 auth bypass in Check Point VPN exploited since May 7, 2026. Full technical breakdown, IOCs, patches and more
CVE-2026-53435: Inside the Jenkins Deserialization Chain That’s Being Exploited Right Now
CVE-2026-53435 is a high-severity Jenkins deserialization flaw (CVSS 8.8) under active exploitation. Full technical breakdown: gadget chain, PoC
VPN Encryption Is Not Enough: How DPI, TLS Fingerprinting, and Active Probing Expose Your Traffic
Your VPN encrypts the payload but not the shape of your traffic. Here's exactly how DPI, JA3/4 TLS fingerprinting, and active probing expose VPN
HDFC AMC Got Breached. Here’s What Actually Happened And What Morpheus’s 680 GB Haul Means for Your Data
HDFC AMC's VMware infrastructure was breached by ransomware group Morpheus, exposing 680 GB of investor PAN, bank, and SIM data. Details
Hardening LLM Integration Pipelines Against Prompt Injection Exploits
Learn how prompt injection attacks exploit LLM apps, RAG pipelines and AI agents, plus practical defenses for tool calls, retrieval, validation and logging
CVE-2026-20253: How Splunk’s Unauthenticated PostgreSQL Sidecar Becomes a Pre-Auth RCE in Five HTTP Requests
CVE-2026-20253 is a CVSS 9.8 unauthenticated RCE in Splunk Enterprise. An exposed PostgreSQL sidecar endpoint lets attackers write arbitrary files and execute code
“Atomic Arch”: Nearly 900 AUR Packages Backdoored with a Developer-Targeting Infostealer and eBPF Rootkit
On June 11, 2026, the Atomic Arch supply chain attack backdoored 900+ Arch Linux AUR packages with the 'deps' infostealer and an eBPF rootkit
