Cybersecurity

JadePuffer agentic attacks now target AI model data with ransomware

The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on …

Cloudflare Internal DNS is now generally available

Canonical: Cloudflare Internal DNS is now generally available — read the full article on rasne.dev. …

5 'Cloud-Ghosts': Vulnerabilidades Docker en Serverless HOY

Descubre las trampas ocultas de Docker que acechan tus funciones serverless y cómo defenderte antes …

The Missing Layer in Every API Stack: Execution Verification

Authentication proves who you are. Authorisation proves what you’re allowed to do. Neither proves th…

Reconstructing cloud identity intrusions from O365 logs

The uncomfortable truth of modern cloud IR is that there is often nothing to "detect" in the old sen…

2,000 parents, 1 rule, 0 leaks: a pentested school parent portal in 8 weeks

I work as a Data Analyst at an independent K-12 girls' school (~1,100 students). In May the school n…

CVE-2026-59948: CVE-2026-59948: Path Traversal and Arbitrary File Write in Composer Dependency Resolution

CVE-2026-59948: Path Traversal and Arbitrary File Write in Composer Dependency Resolution Vulnera…

Data Is the Real Model: Governance, Lineage, and Provenance

Part 3 of "Trust the Machine" -> a series on building AI infrastructure that is secure, compliant, a…

Russian Intelligence Is Hijacking IP Cameras to Track NATO Military Logistics

TL;DR what: A July 10 advisory from the Dutch AIVD and MIVD says at least one Russian intelligen…

WordPress Core Vulnerability Puts Millions at Risk

Originally published at https://monstermegs.com/blog/wordpress-core-vulnerability/ Tens of million…

How to Check Supabase Row Level Security Holes (Free SQL Audit)

Row level security in Supabase fails quietly. There is no crash, no red error banner, nothing in you…

CVE-2025-67726: CVE-2025-67726: Denial of Service via Quadratic Parameter Parsing in Tornado httputil

CVE-2025-67726: Denial of Service via Quadratic Parameter Parsing in Tornado httputil Vulnerabili…