Security notes
All writing.
Vulnerability analysis, technical fixes, code and short news notes. Public sources and my own lab.
42 posts
- News
PHP2Shell: the bug isn't in your app, it's in PHP itself
CVE-2026-109618 and CVE-2026-109619 open the door to unauthenticated RCE in the PHP runtime. Updating your CMS isn't enough; you need to patch the PHP binary on the server. - News
Coruna reaches iOS 18: a new wave with the DarkSword chain
The Coruna exploit kit, which hit older iPhones in March, expanded in late October with a DarkSword-based chain covering iOS 18.4–18.7.2. 608 domains, one-visit compromise and Telegram data. - DevSecOps
Is Container Isolation a Lie? That Thin Line Between Docker Socket and Host
If you think your containers are bulletproof shells, think again. From Docker socket abuse to risky capabilities, let's talk about how that 'sandbox' can vanish in seconds and how to actually secure it. - IoT & OT
The Packet That Stops the PLC: Air-Gap Fairy Tales and Realities in the OT World
When you intercept a 'Function Code 05' request from an unauthorized IP on Wireshark, you realize within seconds that the physical valve or motor is no longer under your control. Welcome to the world of OT. - DevSecOps
Small Box, Big Trouble: Let’s Stop Romanticizing Alpine Linux
Think a 5MB container image makes you unhackable? Think again. We're diving into the myths of Alpine Linux and why your container's 'diet' might be making life easier for Red Teams. - DevSecOps
Armored Vehicle or Glass Jar? The Illusion of Container Isolation
Think your containers are bulletproof? Think again. Let’s dive into why shared kernels and privileged flags are a Red Teamer’s dream and how you can actually lock things down. - Malware Analysis
Who’s in the Sandbox? The Labyrinths of Malware Analysis and the Eternal Game of Cat and Mouse
Signature-based detection is a relic of the past. Today's malware is context-aware and built to evade analysis. Let's dive into how we dissect these sneaky payloads without losing our minds. - Red Team
Before You Double-Click That File: Becoming a 'Plague' Hunter in the Lab
A deep dive into the fundamentals of malware analysis, featuring personal stories from the field and practical tips on static and dynamic analysis without compromising your host machine. - Penetration Testing
It's Not Just About the Patch: The Invisible Side of Vulnerabilities and Our 'Margin of Error'
A deep dive into why relying solely on automated scanners is a trap, the reality of business logic flaws, and a walk down memory lane regarding a production incident. - IoT & OT
From Your Neighbor's Smart Bulb to the Corporate Network: The Backdoors of the IoT World
A deep dive into why everything labeled 'smart' is often a Trojan horse, and how we can secure the 'Internet of Troubles' based on real-world Red Teaming experience. - Red Team
The Trojan Horse Inside the Fortress: Why Network Segmentation is Always Misunderstood
A deep dive into why 'flat networks' are a Red Teamer's dream and how proper segmentation is more than just VLANs—featuring a cautionary tale from my early days in the field. - Red Team
From Cat and Mouse Games to Collective Intelligence: Why Purple Team?
A deep dive into why breaking the silos between Red and Blue teams is crucial for modern cybersecurity, featuring a technical look at Kerberoasting detection gaps.