Research
Mar 28, 2026
PTC Windchill RCE Vulnerability Exploitation
Introduction to PTC Windchill Vulnerability In my pentesting engagements, I have encountered various vulnerabilities in Product Lifecycle Management …
BLOG
Technical articles, tutorials, and security insights.
Research
Mar 27, 2026
Claude Extension Flaw: Zero-Click XSS Prompt Injection
Introduction to the Claude Extension Flaw As a pentester, I’ve encountered numerous vulnerabilities in browser extensions that can lead to …
Research
Mar 27, 2026
Masters of Imitation: Cyber Deception
Introduction to Deception In my pentesting engagements, I’ve encountered various forms of deception used by threat actors. The art world has …
Research
Mar 26, 2026
TA551 Botnet: Ransomware Attacks & Remediation
Introduction to TA551 Botnet In my pentesting engagements, I’ve encountered various botnets, but the TA551 botnet is particularly notable due to …
Research
Mar 26, 2026
VAPT: Pharos Mosaic Exploit & Remediation
Introduction to Pharos Mosaic Vulnerability In my pentesting engagements, I’ve encountered various control systems, including the Pharos …
Research
Mar 25, 2026
CISA KEV Catalog Update: New Exploited Vulnerabilities
Introduction to CISA KEV Catalog The Cybersecurity and Infrastructure Security Agency (CISA) maintains a catalog of Known Exploited Vulnerabilities …
Research
Mar 25, 2026
Schneider Electric EcoStruxure Foxboro DCS Vulnerability
Introduction to Schneider Electric EcoStruxure Foxboro DCS In my pentesting engagements, I have encountered various industrial control systems (ICS), …
Research
Mar 24, 2026
Crunchyroll Breach: 6.8M Users' Data Stolen
Introduction to the Breach In my pentesting engagements, I’ve seen numerous cases of sensitive data exposure due to inadequate security …
Research
Mar 24, 2026
TeamPCP Wiper: Kubernetes Attacks
Introduction to TeamPCP and Kubernetes Attacks As a security engineer, I’ve been following the recent activities of the TeamPCP hacking group. …
Research
Mar 23, 2026
CVE-2025-32975: Hijacking Unpatched Quest KACE SMA
Introduction to CVE-2025-32975 As a security engineer, I’ve been following the recent developments on the Quest KACE Systems Management …