What if I told you six thousand of your employees were two steps removed from gaining full control over your IT infrastructure. If we told you this was related to ServiceNow, would you be able to identify and mitigate the root cause? How would your SOC react if they were […]

Hacking Lab Hacking Lab Home People Publications Contact Light Dark Automatic QueryHouse: Cross-DBMS Differential Testing with LLM and Query Transpilation (to appear) Seoyeon Oh , Juhyun Song , Jaemin Park , Kwanghee Lee , Minae Hyeon , Minji Kim , Sehyuk Ka , Gwangwun Jung , Brian Pak , Insu […]

Automatic Program Repair (APR) has emerged as a critical technology for autonomously addressing software vulnerabilities. While recent advances in Large Language Models (LLMs) have enabled sophisticated agentic APR systems, existing approaches still struggle to generate patches for vulnerabilities whose root causes are difficult to identify. This happens because prior methods […]

# Breaking Claude Code Opus 5 Auto Mode In this post, we explore how a simple website summary request hijacks `Claude Code Opus 5` in `Auto Mode` and achieves code execution with 60-80% attack success rate using a small sample size. This is interesting because a third-party evaluation commissioned by […]

Now that we’re past the sensational headline, let’s be real. This is the first post in a series about using AI/LLMs to do security work. I know, I know. Everybody and their grandma is using AI for this nowadays. Every time I’m opening up any kind of social media, I […]

TALOS-2026-2360 CVE-2026-48388 A privilege escalation vulnerability exists in the Installation functionality of Photoshop (version(s): Photoshop_Set-Up.exe version 2.11.0.30). A specially crafted malformed file can lead to privilege escalation. An attacker can replace with a malicious file to trigger this vulnerability. The versions below were either tested or verified to be vulnerable […]

Researcher **Published:** Tuesday, 25 August 2026 at 14:24 UTC **Updated:** Tuesday, 25 August 2026 at 14:24 UTC I was on my laptop, as I often am when there’s rubbish on telly, and found myself wondering what characters are allowed in a tag. I knew they had to begin with “a-zA-Z”, […]

# AWS EKS forensics: data sources and investigation tooling Investigating a compromise in Amazon EKS means piecing together evidence spread across three layers: the managed Kubernetes control plane, the worker nodes, and the surrounding AWS services. This article maps the data sources an EKS cluster exposes for digital forensics and […]

**Research by: Jiří Vinopal** **(**@vinopaljiri **)** What if a **trusted security component** could be repurposed into an **attacker-controlled** kernel primitive? What if a **signed Microsoft remediation driver** could be instructed to execute arbitrary **file** and **registry** operations from **Ring 0** – **without** exploits, vulnerabilities, or memory corruption? In this publication, […]

### Uh oh! There was an error while loading. Please reload this page. / **security-research** Public # [Initial Disclosure] AMD | ZEN 1 ## Package tbd ## Affected versions tbd ## Patched versions tbd ## Description ### Affected Vendor / Project: AMD ### Affected Product: Zen 1 CPU ### Private […]