Cybersecurity

Your AI pentester is probably exfiltrating your client's data. Run it air-gapped instead.

Disclosure: I build Darkmoon, one of the tools that does this locally. But the problem is real no ma…

6 open-source AI pentesters, one OWASP Juice Shop, ranked (reproducible)

Disclosure: Darkmoon is my project. But this is a reproducible benchmark, not a ranking I get to fud…

I let an autonomous AI agent try to escape its sandbox. Here is what still reached the internet.

Disclosure: I build Darkmoon, an autonomous AI pentester. This post is about a failure mode every te…

Top 7 Crypto Loan Without Collateral Choices for Borrowers

Explore Now • Instant Support • Trusted Service Discover how to navigate the world of crypto loans …

Next.js July 2026 Security Release: What Developers Need to Know

I saw the announcement this morning about the Next.js July 2026 Security Release, and honestly, thes…

I built an open-source OSINT tool that runs 55 modules with zero API keys

Been learning web security for a while and kept jumping between different tools for every recon tas…

Great article for security concepts

I Deployed a Purple Team Inside My Kubernetes Cluster. The Scanners Never Saw It Coming. …

[TryHackMe Writeup] Overheard at Breakfast

🏨 Hacker Holidays — The Byte Lotus Hotel 🍳 Overheard at Breakfast — Full Walkthrough …

Best VPN Router for Home Security in 2025

Best VPN Router for Home Security in 2025 As the world becomes increasingly digital, the need for …

Your Identity Controls Passed. Your Authorization Chain Failed.

A credential chain functioned exactly as it was designed to. No firewall failed. No exploit executed…

Perceptual Hashing: Matching Images That Are Not Identical

Every property that makes SHA-256 useful comes from one behaviour: flip a single bit of input and th…

Stored XSS: How Unsanitized Input Leads to Script Execution

Stored Cross-Site Scripting (XSS) is one of the most dangerous web vulnerabilities. When an applicat…