# Breaking Claude Code Opus 5 Auto Mode In this post, we explore how a simple website summary request hijacks `Claude Code Opus 5` in `Auto Mode` and achieves code execution with 60-80% attack success rate using a small sample size. This is interesting because a third-party evaluation commissioned by […]

Now that we’re past the sensational headline, let’s be real. This is the first post in a series about using AI/LLMs to do security work. I know, I know. Everybody and their grandma is using AI for this nowadays. Every time I’m opening up any kind of social media, I […]

TALOS-2026-2360 CVE-2026-48388 A privilege escalation vulnerability exists in the Installation functionality of Photoshop (version(s): Photoshop_Set-Up.exe version 2.11.0.30). A specially crafted malformed file can lead to privilege escalation. An attacker can replace with a malicious file to trigger this vulnerability. The versions below were either tested or verified to be vulnerable […]

Researcher **Published:** Tuesday, 25 August 2026 at 14:24 UTC **Updated:** Tuesday, 25 August 2026 at 14:24 UTC I was on my laptop, as I often am when there’s rubbish on telly, and found myself wondering what characters are allowed in a tag. I knew they had to begin with “a-zA-Z”, […]

# AWS EKS forensics: data sources and investigation tooling Investigating a compromise in Amazon EKS means piecing together evidence spread across three layers: the managed Kubernetes control plane, the worker nodes, and the surrounding AWS services. This article maps the data sources an EKS cluster exposes for digital forensics and […]

**Research by: Jiří Vinopal** **(**@vinopaljiri **)** What if a **trusted security component** could be repurposed into an **attacker-controlled** kernel primitive? What if a **signed Microsoft remediation driver** could be instructed to execute arbitrary **file** and **registry** operations from **Ring 0** – **without** exploits, vulnerabilities, or memory corruption? In this publication, […]

### Uh oh! There was an error while loading. Please reload this page. / **security-research** Public # [Initial Disclosure] AMD | ZEN 1 ## Package tbd ## Affected versions tbd ## Patched versions tbd ## Description ### Affected Vendor / Project: AMD ### Affected Product: Zen 1 CPU ### Private […]

This will be mostly rambling disguised as a technical walkthrough. I will touch on certain topics such as hardware roots of trust, signed image formats, Qualcomm boot stages, Android Verified Boot, UEFI, measured boot, and remote evidence (remote attestation). My idea is that I will briefly introduce the concepts and […]

Research by: Jaromír Hořejší (@JaromirHorejsi) We first noticed a ransomware family called StopAndProtect in the middle of May 2026. Further analysis of the infrastructure reveals that the infection chain starts with a ClickFix social-engineering technique, which prompts victims to execute a PowerShell command. This leads to two stages of additional […]

# Recovering Encrypted LLM Reasoning Traces A few days ago, a paper named “Stealing Reasoning Traces from Proprietary LLM APIs” was published. It describes a simple, yet super elegant way to recover encrypted LLM reasoning traces. Naturally, I had to try it. ## Background AI labs like OpenAI and Anthropic […]