Video

Sometimes the best move is to take your vulnerable site offline. Here’s how I handled it with my own site.

Ashish Rajan and I discuss the limits of AI guardrails, why prompt injection remains a challenge, and where responsibility for

our years after KB5014754 and one year after CVE-2024-49019, every hardening guide says Active Directory Certificate Services is a closed

Crypto phones promise the convenience of a mobile OS with hardware-backed key management. We tested that claim on dGEN1, the

From time to time I take another pass at WMI to see if there’s anything left in it that hasn’t

A frugal, eDNA sniffing system to audit atmospheric biodata-leaks in the era of Climate change. Current healthcare cybersecurity focuses on

Web cache poisoning is often written off as a class of vulnerabilities with limited real-world impact. Most reported instances only

The Rare Circuits team decided this was the year to take all our hard work on last year’s Aerospace Village

85 findings exploitable from the internet with zero prior access. 28 takedown chains. Crypto failures that let you decrypt all

OpenAI designed ChatGPT’s sandbox as a secure runtime with network isolation, strict timeouts, and an AI supervisor filtering commands. Extracting