KindaRails2Shell: When an Image Upload Reads Your Secrets
CVE-2026-66066 turns untrusted image uploads into file reads in Rails Active Storage. Check exposure, patch correctly, and rotate what leaked.
Threat Intelligence & Analysis
Offensive thinking.
Offensive thinking.
Defensive expertise.
In-depth red team tactics, blue team strategy — and privacy-first security tools that run entirely in your browser. No accounts. No telemetry. No data leaves your machine.
Featured
Latest analysis
Archive
Recent posts
Langflow CVE-2026-9198: Auto-Login Was a Server Shell
Default Langflow deployments exposed a two-step path from no account to remote code execution. Learn how to patch, isolate, hunt, and rotate secrets.
LoadMaster CVE-2026-8037: The Load Balancer Became the Way In
An unauthenticated command-injection flaw turned a perimeter appliance into an entry point. Here is how to patch, contain, hunt, and recover.
Week 32 Security Roundup: The Management Plane Is the Target
TeamCity, N-central, and Cisco FMC put the same lesson in three different packages: attackers want the systems that already control everything else.
DEF CON 34: The Hacker Party That Became the World's Biggest Hacking Conference
DEF CON started as a farewell party for a BBS sysop who never showed up. 33 years later it draws more than 30,000 people, shapes election security policy, and lets autonomous AI agents hunt flags.
TrojPix: Stealing Data from an Air-Gapped Computer Through Its Display Cable
USENIX Security 2026 research shows how imperceptible pixel changes can turn a digital display cable into an electromagnetic covert channel. The result is real, but so are its prerequisites.
NGINX's Configuration-Dependent Vulnerabilities: Why Version Scanning Is Not Enough
NGINX 1.30.4 and 1.31.3 fixed three new memory-safety flaws, but exposure depends on map, slice, SSI, proxy, and buffering configuration. Here is how to audit the real path.