Practical content from industry professionals on digital forensics · data recovery · cyber security · KVKK compliance.
AI agents with long term memory can be tricked in all their later decisions by a malicious record that slips into the memory. This article explains agent memory poisoning, contamination across sessions and users, and the DSET and KAOS proof based approach.
Read moreMultimodal models that process images, audio and documents can be tricked with hidden instructions embedded in non text input. This article explains prompt injection embedded in images, indirect attack scenarios and the DSET and KAOS proof based approach.
Read moreWhen the output a language model produces is passed to another system without validation, it opens the door to classic web flaws. This article explains improper output handling, scenarios of XSS in the browser, SSRF on the server and command injection, and the DSET and KAOS proof based approach.
Read moreThe Model Context Protocol is an open standard that connects AI agents to external tools and data sources. This article explains the attack surface of MCP servers, tool poisoning, delegation flaws and secret leakage through an attacker's eyes and shows the DSET and KAOS proof based approach.
Read moreVoIP and SIP penetration testing proves the flaws of IP telephony systems and unified communications infrastructure. Registration hijacking, call interception, toll fraud and unencrypted signaling, when it is needed and the proof based approach with KAOS.
Read moreThick client penetration testing proves the client side trust assumptions, local data storage and backend communication flaws of desktop applications. Reverse engineering, authorization bypass, insecure storage and business logic, when it is needed and the proof based approach with KAOS.
Read moreCI/CD pipeline penetration testing proves the flaws of the software build and deployment chain. Poisoned build steps, leaked secrets, insecure runners and supply chain risks, DevSecOps integration, when it is needed and the proof based approach with KAOS.
Read morePrivilege escalation penetration testing proves how a limited user can rise to system administrator rights. Local escalation paths on Linux and Windows, misconfigurations, weak service permissions and credential harvesting, when it is needed and the proof based approach with KAOS.
Read moreKubernetes and container penetration testing proves the flaws in cluster configuration, container images and runtime isolation. Misconfigured RBAC, privileged container escape, exposed kubelet and image supply chain risks, when it is done and the proof based approach with KAOS.
Read moreTwo HIGH and one MEDIUM TLS hostname verification bypass flaws in the Node.js October 2026 release can cause a valid certificate to be trusted for the wrong server. The fix is upgrading, because the defect is in the runtime, not your configuration.
Read moreTwo critical remote code execution flaws in PHP core, nicknamed PHP2Shell. CVSS 9.2 critical. Branches 8.2 through 8.5 got patches, 8.0 and 8.1 are end of life. Update today.
Read moreThe Node.js release of 21 October 2026 fixed ten flaws, four of them high severity. An action guide to upgrading to 22.23.4, 24.22.1 or 26.12.1 and what to do next.
Read more