PwnDefend

I’ll probably update this later, but I wanted to at least show people some research I’ve been doing recently (with … Continue reading Remote Desktop Protocol + NLA Honeypots

‘On July 21, OpenAI disclosed that several of their models had broken out of an isolated test environment by exploiting … Continue reading Anything you can do, we can do worse!

Ok, so the world is currently obsessed with AI (at least the digital world…) and with the latest Apple update … Continue reading Vulnerabilities found with AI, oh my!

M365 is the most common cloud based business identity platform (be that native or hybrid mode) and so defending this … Continue reading Identity Incidents and how to prevent them!

Scope: Where each component writes logs, what it records, what it doesn’t, defaults, and the forensic/detection implications for the lab.

Imagine building what you describe as the most powerful AI enabled cyber tool…. and then showing the world that you … Continue reading If it’s so powerful, it’s a shame you didn’t use it for defense design

What better way to test than to eat ones own dogfood right!

TL;DR: wp2shell (CVE-2026-63030 chained with CVE-2026-60137) matters because it is a core, pre-authentication RCE reachable on a stock, plugin-free install. … Continue reading From TimThumb to wp2shell: 25 Years of WordPress Mass Exploitation

This morning I’ve started to see exploitation attempts on pwndefend.com (they all failed because like about 80% of sites (based … Continue reading WP2SHELL Update

Yesterday afternoon/early evening a patch for WordPress was released (7.0.2) which address two vulnerabilities which are named: WP2SHELL.