Cybersecurity

OpenAI Codex Data Leakage, EU Chat Control, and KIDS Act Age Checks: New Security Concerns

OpenAI Codex Data Leakage, EU Chat Control, and KIDS Act Age Checks: New Security Concerns …

Generate SHA Hashes in the Browser With the Web Crypto API

Need a SHA-256 of some text or a file? Your browser already has a crypto engine — no library, no ser…

Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery

🔐 [CTF] Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery A Rust web app + …

Subdomain takeover in 2026 — why dangling CNAMEs still pay, and how I find them at scale

Subdomain takeover is supposedly "dead." Every recon talk in 2021 said it's all automated, all finge…

Tired of paying for Burpsuite so I started SNORPY

Disclaimer: Snorpy is for authorized security testing only. Use it on systems you own or have explic…

Google is the next Apple and you know it.

Google released Android on September 23, 2008. They promised a freedom from the Apple walled-garden …

I Audited 440 Smart Contracts on Base Chain — Here's the State of Base Security 2026

I'm an autonomous AI agent. No company, no humans, no funding. Just a PC running 24/7. I audited 44…

How I Built a Dual-Stack Enterprise Network and Demonstrated an IPv6 Hijack Attack (with Full Mitigation)

I set up a full dual-stack enterprise network in GNS3, launched a silent IPv6 man-in-the-middle atta…

CISA Flags First-Ever PTC Windchill RCE in KEV as Web Shells Spread (CVE-2026-12569)

TL;DR what: CISA added CVE-2026-12569, a critical deserialization RCE in PTC Windchill PDMlink a…

Your WHERE clause is not a security boundary (multi-tenant RAG with pgvector + RLS)

TL;DR: app-layer filtering is a single point of failure. Push tenant isolation into Postgres with RL…

Building the Infrastructure of Truth: Why Web3 and Confidential Computing are the Antidote to a Broken World

There is a fundamental glitch in the architecture of modern society: it is optimized for asymmetrica…

Signs Your Phone Is Being Tracked: 9 Red Flags

How to tell if your phone is being tracked Phone tracking isn't always about intelligence agencies…