AI-powered Phishing-as-a-Service: Inside Two BEC Kits
Business email compromise (BEC) remains one of the most damaging threats we respond to, and the tooling behind…
wp2shell: incident response guide (CVE-2026-63030 + CVE-2026-60137)
wp2shell is a critical, unauthenticated remote code execution vulnerability in WordPress core shared with the public on July…
CVE-2026-30612: A vulnerability in Time4Popcorn (PopcornTime)
Time4Popcorn is a fork of Popcorn Time, a popular download application. This fork is also distributed under the…
Device Code Phishing Forensics: What We Learned Investigating BEC in the Wild
Business Email Compromises (BEC) are among the most prevalent cyber incidents out there and the biggest risk to…
Breaking encryption schemes the lazy way
The other day, I was working on a DragonForce ransomware case where the ransomware had actually encrypted not…
Blocking Shadow AI: How to Prevent Data Leakage from LLMs
Employees are turning to personal AI tools like ChatGPT, Claude, and Gemini to get work done faster. The…
Making AI Agents Work in Europe’s Regulatory Reality
It started as a weekend project with a simple question: how can we make European AI agents become…
Ghosts in the Cloud: Hijacking Orphaned Azure Blob Storage
Before we get to it, a small disclaimer: The majority of this research was performed in 2025, but…
Log Poisoning in OpenClaw
A few weeks ago, OpenClaw suddenly started popping up everywhere. An open-source AI assistant with deep system and…
From Helper to Adversary: The Dual-Use Risks of AI Canvases
Adversaries are becoming more creative by the day, constantly seeking new ways to misuse emerging technologies. That’s why…