CCyber Knight1d ago · 5 min readA 2.7-Rated Flaw Let Attackers Work Without Leaving a TraceThe logs said nothing had happened. Sometime in early 2026, according to CrowdStrike, an intruder was already inside some VMware environments in the United States legal sector, with administrator accenulltrace.hashnode.dev
CCyber Knight2d ago · 5 min readAn AI Agent Found Four Flaws in the Software Running Particle Accelerators — in Under Four HoursThree hours and forty-nine minutes. That is how long it took an autonomous AI agent to find four previously unknown flaws in software that helps run particle accelerators and fusion experiments. The anulltrace.hashnode.dev
AArshadSep 5 · 6 min readHow a Profile Update Feature Could Drain a Company's Bank AccountI was looking at one of the most normal features you can find in almost any application: Update Profile. Nothing exciting. A user changes their name, profile picture, maybe email, and the backend updablog.arshadakl.in
AAlireza KalhorAug 25 · 7 min readCVE-2026-17532: nonce: true => Web ShellUnauthenticated reflected XSS to 1-click RCE in Seraphinite Accelerator, a WordPress caching plugin on 50,000+ sites. The site that looked clean What would you do if I told you that just by opening ykalhor.hashnode.dev
ZZeroProtocolAug 13 · 7 min readCommon Web Application TechnologiesIntroduction Modern web applications are rarely built with a single technology. A typical application combines a web server, a programming language, a framework, a database, data formats, and backend 1webpentestingdeepdive.hashnode.dev
SSunnyJul 28 · 14 min readTryHackMe Vulnerabilities 101 Beginner-Friendly Learning GuideIntroduction I recently completed the Vulnerabilities 101 room on TryHackMe as part of my ongoing cybersecurity learning journey. Vulnerabilities are one of the most important concepts in cybersecuritcybersecurity-learning.hashnode.dev
RrathsaraMay 19 · 11 min readBuilding The Technical Foundation For Continuous Vulnerability VisibilityThis is the second article in the series. The first one covered why our periodic scanning model had stopped working at scale. This one is the technical account of what we built in its place. A quick n1rr-cyber.hashnode.dev
RrathsaraMay 16 · 6 min readThe Vulnerability Scanning Model That Stopped Working at ScaleMost vulnerability management programmes are designed to produce reports, not to maintain a continuously answerable state of exposure. Ours was one of them. We had a working Qualys deployment and no orr-cyber.hashnode.dev
Aaviral srivastavaMar 29 · 10 min readI Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.XGBoost is one of the most important libraries in machine learning. 26,000+ GitHub stars. Used by banks for fraud detection, insurance companies for risk modeling, tech companies for ranking systems, aviraxroot.hashnode.dev
Aaviral srivastavaMar 16 · 13 min readI Found a SQL Injection in an AI Agent. It Taught Me That We Broke the First Rule of Database Security.I was two hours into auditing AnythingLLM when I stopped scrolling and stared at my screen for a good ten seconds. Not because the code was complex. Because it was the opposite. javascript getTableSchaviraxroot.hashnode.dev
