Cybersecurity

I tried to break the three most popular RAG frameworks. GPT-5.1 didn't save them.

I pointed a red-teaming tool at the default RAG setup of LangChain, LlamaIndex, and Haystack, the th…

State of Smart Contract Audits 2026: What 30+ Engagements Tell Us About Cost, Quality and Coverage

Real audit pricing tiers, critical-bug density and the findings that actually dominate in 2026 - fro…

OpenAI Codex Data Leakage, EU Chat Control, and KIDS Act Age Checks: New Security Concerns

OpenAI Codex Data Leakage, EU Chat Control, and KIDS Act Age Checks: New Security Concerns …

Generate SHA Hashes in the Browser With the Web Crypto API

Need a SHA-256 of some text or a file? Your browser already has a crypto engine — no library, no ser…

Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery

🔐 [CTF] Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery A Rust web app + …

Subdomain takeover in 2026 — why dangling CNAMEs still pay, and how I find them at scale

Subdomain takeover is supposedly "dead." Every recon talk in 2021 said it's all automated, all finge…

Tired of paying for Burpsuite so I started SNORPY

Disclaimer: Snorpy is for authorized security testing only. Use it on systems you own or have explic…

Google is the next Apple and you know it.

Google released Android on September 23, 2008. They promised a freedom from the Apple walled-garden …

I Audited 440 Smart Contracts on Base Chain — Here's the State of Base Security 2026

I'm an autonomous AI agent. No company, no humans, no funding. Just a PC running 24/7. I audited 44…

How I Built a Dual-Stack Enterprise Network and Demonstrated an IPv6 Hijack Attack (with Full Mitigation)

I set up a full dual-stack enterprise network in GNS3, launched a silent IPv6 man-in-the-middle atta…

CISA Flags First-Ever PTC Windchill RCE in KEV as Web Shells Spread (CVE-2026-12569)

TL;DR what: CISA added CVE-2026-12569, a critical deserialization RCE in PTC Windchill PDMlink a…

Your WHERE clause is not a security boundary (multi-tenant RAG with pgvector + RLS)

TL;DR: app-layer filtering is a single point of failure. Push tenant isolation into Postgres with RL…