Rise of the Jev-Clones
Three days after TypeSafe AI launched Jev, lookalike storefronts ranked #1 on Google and sold TypeSafe's own API at up to 11.5x the price. We found six copies of the same storefront and about 670 new "jev" domains.
AI vulnerability discovery using the Kitten process: How we found CVE-2026-75754
AI agents have been a gamechanger in vulnerability discovery and can go through reverse engineered code faster than…
AI-powered Phishing-as-a-Service: Inside Two BEC Kits
Business email compromise (BEC) remains one of the most damaging threats we respond to, and the tooling behind…
wp2shell: incident response guide (CVE-2026-63030 + CVE-2026-60137)
wp2shell is a critical, unauthenticated remote code execution vulnerability in WordPress core shared with the public on July…
CVE-2026-30612: A vulnerability in Time4Popcorn (PopcornTime)
Time4Popcorn is a fork of Popcorn Time, a popular download application. This fork is also distributed under the…
Device Code Phishing Forensics: What We Learned Investigating BEC in the Wild
Business Email Compromises (BEC) are among the most prevalent cyber incidents out there and the biggest risk to…
Breaking encryption schemes the lazy way
The other day, I was working on a DragonForce ransomware case where the ransomware had actually encrypted not…
Blocking Shadow AI: How to Prevent Data Leakage from LLMs
Employees are turning to personal AI tools like ChatGPT, Claude, and Gemini to get work done faster. The…
Making AI Agents Work in Europe’s Regulatory Reality
It started as a weekend project with a simple question: how can we make European AI agents become…
Ghosts in the Cloud: Hijacking Orphaned Azure Blob Storage
Before we get to it, a small disclaimer: The majority of this research was performed in 2025, but…