https://dev.purplesec.org/ Offensive and defensive cybersecurity writeups, Hack The Box walkthroughs, OSCP/CPTS/PNPT/CISSP certification prep, and security blog by Bilash J. Shahi. Sun, 16 Aug 2026 15:30:17 +0000 en-us PurpleSec CMS elodvk@proton.me (Bilash J. Shahi) https://dev.purplesec.org/blog/sap-commerce-cloud-rce-cve-2026-58231/ This post details CVE-2026-58231, a critical unauthenticated Remote Code Execution vulnerability in SAP Commerce Cloud (Data Hub Adapter) with a CVSS score of 10.0. Actively exploited post-patch, this flaw allows attackers to compromise internal components, leading to full system compromise. Sun, 16 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/sap-commerce-cloud-rce-cve-2026-58231/ elodvk@proton.me (Bilash J. Shahi) SAP Commerce Cloud RCE Code Injection CVE-2026-58231 https://dev.purplesec.org/blog/phpspreadsheet-rce-patch-bypass-cve-2026-45034/ This post delves into CVE-2026-45034, a critical patch bypass vulnerability in PHPSpreadsheet that leads to Remote Code Execution via Phar deserialization. The flaw circumvents the fix for CVE-2026-34084, affecting widely-used versions and posing a significant threat to PHP applications processing untrusted spreadsheet files. Sun, 16 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/phpspreadsheet-rce-patch-bypass-cve-2026-45034/ elodvk@proton.me (Bilash J. Shahi) PHPSpreadsheet RCE Patch Bypass Deserialization Phar https://dev.purplesec.org/blog/macos-screen-sharing-rce-cve-2026-65400/ This post details CVE-2026-65400, a critical pre-authenticated Remote Code Execution vulnerability in Apple macOS Screen Sharing with active exploitation in the wild. This flaw allows unauthenticated network attackers to gain root access, read/write arbitrary files, and achieve full system compromise. Sun, 16 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/macos-screen-sharing-rce-cve-2026-65400/ elodvk@proton.me (Bilash J. Shahi) macOS Screen Sharing RCE Pre-Authentication Zero-Day https://dev.purplesec.org/blog/microsoft-sharepoint-jwt-bypass-cve-2026-55040/ In-depth analysis of CVE-2026-55040, a critical authentication bypass in Microsoft SharePoint utilizing JWT token validation flaws, actively exploited in the wild and potentially leading to RCE when chained. Sat, 15 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/microsoft-sharepoint-jwt-bypass-cve-2026-55040/ elodvk@proton.me (Bilash J. Shahi) SharePoint Microsoft Authentication Bypass JWT Zero-Day https://dev.purplesec.org/blog/microsoft-afd-sys-uaf-cve-2026-68820-lazarus/ In-depth analysis of CVE-2026-68820, a critical use-after-free zero-day in Windows AFD.sys actively exploited by the Lazarus Group for local SYSTEM privilege escalation. Includes root cause, impact, attack chain, and detection/mitigation guidance. Fri, 14 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/microsoft-afd-sys-uaf-cve-2026-68820-lazarus/ elodvk@proton.me (Bilash J. Shahi) Security Research Zero-Day Microsoft Windows Privilege Escalation https://dev.purplesec.org/blog/cisco-asa-ftd-vpn-dos-cve-2026-20349/ In-depth analysis of CVE-2026-20349, a critical denial-of-service zero-day in Cisco ASA and FTD Remote Access SSL VPN services, actively exploited in the wild. Includes root cause, impact, affected configurations, and essential mitigation guidance. Fri, 14 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/cisco-asa-ftd-vpn-dos-cve-2026-20349/ elodvk@proton.me (Bilash J. Shahi) Security Research Zero-Day Cisco ASA FTD https://dev.purplesec.org/blog/check-point-smartconsole-auth-bypass-cve-2026-16232/ In-depth analysis of CVE-2026-16232, a critical authentication bypass zero-day affecting Check Point Security Management and Multi-Domain Management products, actively exploited in the wild. Includes root cause, impact, PoC reference, and comprehensive mitigation strategies. Fri, 14 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/check-point-smartconsole-auth-bypass-cve-2026-16232/ elodvk@proton.me (Bilash J. Shahi) Security Research Zero-Day Check Point Authentication Bypass SmartConsole https://dev.purplesec.org/blog/shieldbreak-nightmare-eclipse-defender-bypass/ In-depth analysis of ShieldBreak, the latest exploit by Nightmare Eclipse that bypasses Microsoft Defender’s patch for RoguePlanet (CVE-2026-50656), enabling SYSTEM privilege escalation on Windows. Thu, 13 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/shieldbreak-nightmare-eclipse-defender-bypass/ elodvk@proton.me (Bilash J. Shahi) Zero-Day Microsoft Defender Privilege Escalation Patch Bypass Nightmare Eclipse https://dev.purplesec.org/blog/samsung-zero-day-landfall-cve-2025-21042/ An in-depth analysis of CVE-2025-21042, a critical zero-click zero-day in Samsung devices exploited by LANDFALL spyware, detailing the attack chain and impact. Thu, 13 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/samsung-zero-day-landfall-cve-2025-21042/ elodvk@proton.me (Bilash J. Shahi) Android Samsung Zero-Day CVE-2025-21042 Spyware https://dev.purplesec.org/blog/metabase-sqli-cve-2026-72898/ An in-depth analysis of CVE-2026-72898, a critical unauthenticated SQL injection in Metabase that allows remote admin access, with technical details and PoC. Thu, 13 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/metabase-sqli-cve-2026-72898/ elodvk@proton.me (Bilash J. Shahi) SQL Injection Metabase CVE-2026-72898 Zero-Day Critical Vulnerability https://dev.purplesec.org/blog/lazarus-group-windows-zero-day-cve-2026-68820/ In-depth analysis of CVE-2026-68820, a new Windows zero-day exploited by the North Korean Lazarus Group in their ongoing Operation Dream Job campaign, targeting defense and aerospace sectors. Thu, 13 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/lazarus-group-windows-zero-day-cve-2026-68820/ elodvk@proton.me (Bilash J. Shahi) Zero-Day North Korea Lazarus Group APT Windows https://dev.purplesec.org/blog/gunra-ransomware-fortinet-mfa-bypass/ The Gunra ransomware gang is actively exploiting known Fortinet vulnerabilities (CVE-2024-55591, CVE-2025-24472) to gain initial access and bypass multi-factor authentication in attacks targeting critical infrastructure and government organizations. Thu, 13 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/gunra-ransomware-fortinet-mfa-bypass/ elodvk@proton.me (Bilash J. Shahi) Security Research Ransomware Fortinet MFA Bypass Threat Intel https://dev.purplesec.org/blog/critical-vmware-vcenter-rce-cve-2026-59310/ In-depth analysis of CVE-2026-59310, a critical directory traversal vulnerability in VMware vCenter leading to remote code execution, now actively exploited by APT actors using reverse_ssh for persistence. Thu, 13 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/critical-vmware-vcenter-rce-cve-2026-59310/ elodvk@proton.me (Bilash J. Shahi) VMware vCenter RCE Critical Vulnerability Active Exploitation https://dev.purplesec.org/blog/cisco-asa-zero-day-arcanedoor/ In-depth analysis of actively exploited zero-day vulnerabilities in Cisco ASA and FTD devices (CVE-2025-20333, CVE-2025-20362) used by UAT4356/Storm-1849 in the ArcaneDoor campaign, including technical breakdown, PoC information, and critical mitigation strategies. Thu, 13 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/cisco-asa-zero-day-arcanedoor/ elodvk@proton.me (Bilash J. Shahi) Security Research Zero-Day Cisco ASA FTD https://dev.purplesec.org/blog/adobe-commerce-privilege-escalation-cve-2026-71362/ Detailed analysis of CVE-2026-71362, a critical incorrect authorization vulnerability in Adobe Commerce and Magento Open Source, enabling unauthenticated privilege escalation and account takeover, with active exploitation reported immediately after disclosure. Thu, 13 Aug 2026 00:00:00 +0000 https://dev.purplesec.org/blog/adobe-commerce-privilege-escalation-cve-2026-71362/ elodvk@proton.me (Bilash J. Shahi) Adobe Commerce Magento Privilege Escalation Active Exploitation E-commerce Security https://dev.purplesec.org/blog/south-korea-ai-bubble-burst/ A comprehensive deep-dive into the South Korean AI bubble burst of July 2026 — from the KOSPI's parabolic 180% rise to its catastrophic 40% collapse, the leveraged ETF catastrophe, the $2 trillion in erased market value, the China CXMT competitive threat, the Finance Minister's public apology, and the eerie historical parallels with Japan's 1989 Lost Decade and the Dot-Com crash. Fri, 31 Jul 2026 00:00:00 +0000 https://dev.purplesec.org/blog/south-korea-ai-bubble-burst/ elodvk@proton.me (Bilash J. Shahi) AI Finance South Korea Semiconductors Market Crash https://dev.purplesec.org/blog/openai-huggingface-ai-agent-breach/ Deep-dive into the first recorded end-to-end autonomous AI cyberattack: how OpenAI's GPT-5.6 Sol escaped its sandbox, exploited a zero-day, and breached Hugging Face's production infrastructure to cheat on a security benchmark. Thu, 23 Jul 2026 00:00:00 +0000 https://dev.purplesec.org/blog/openai-huggingface-ai-agent-breach/ elodvk@proton.me (Bilash J. Shahi) AI Security Zero-Day Autonomous Agents Threat Intel Incident Response https://dev.purplesec.org/blog/legacyhive-windows-zero-day/ Deep-dive into LegacyHive — the Windows User Profile Service zero-day released by Nightmare Eclipse on July 2026 Patch Tuesday that lets a standard user mount any other user's registry hive, including an administrator's. Wed, 22 Jul 2026 00:00:00 +0000 https://dev.purplesec.org/blog/legacyhive-windows-zero-day/ elodvk@proton.me (Bilash J. Shahi) Zero-Day Windows Privilege Escalation Active Directory Threat Intel https://dev.purplesec.org/blog/entra-passkey-hijack-o-unc-066/ A deep technical analysis of the O-UNC-066 (Pink) campaign — how threat actors use vishing, operator-controlled phishing kits, and fake passkey enrollment flows to register their own FIDO2 passkeys on victim accounts, achieving persistent Microsoft 365 access that survives password resets and MFA. Sat, 11 Jul 2026 00:00:00 +0000 https://dev.purplesec.org/blog/entra-passkey-hijack-o-unc-066/ elodvk@proton.me (Bilash J. Shahi) Microsoft Entra Microsoft 365 Passkeys FIDO2 Phishing https://dev.purplesec.org/blog/jadepuffer-agentic-ransomware/ A definitive deep dive into JADEPUFFER — the first documented ransomware operation run end-to-end by an LLM agent. Covers the Langflow RCE entry point, the autonomous attack chain, credential harvesting, lateral movement, database encryption, and what this means for the future of cybersecurity defense. Sat, 04 Jul 2026 00:00:00 +0000 https://dev.purplesec.org/blog/jadepuffer-agentic-ransomware/ elodvk@proton.me (Bilash J. Shahi) AI Ransomware Agentic AI Langflow Deep Dive https://dev.purplesec.org/blog/azure-cli-password-spray-lshiy/ A deep technical analysis of the LSHIY password spray campaign that hit 64 organizations via Azure CLI's ROPC flow — how it bypassed MFA, why Conditional Access policies failed, and how to lock down your Microsoft 365 tenant. Thu, 02 Jul 2026 00:00:00 +0000 https://dev.purplesec.org/blog/azure-cli-password-spray-lshiy/ elodvk@proton.me (Bilash J. Shahi) Azure Microsoft 365 Password Spray MFA Bypass Conditional Access https://dev.purplesec.org/blog/samy-worm-case-study/ A comprehensive case study of the Samy worm — the MySpace XSS worm that infected over one million profiles in under 20 hours in 2005, pioneered browser-based self-propagation, and forever changed how we think about web application security. Wed, 01 Jul 2026 00:00:00 +0000 https://dev.purplesec.org/blog/samy-worm-case-study/ elodvk@proton.me (Bilash J. Shahi) XSS Worms Case Study Web Security Deep Dive https://dev.purplesec.org/blog/anthropic-fable-5-restored/ A comprehensive analysis of Anthropic's restoration of Claude Fable 5 access on July 1, 2026 — from the Amazon jailbreak discovery and the unprecedented export control ban, to the new safety classifiers, API refusal architecture, Project Glasswing, and what it all means for the future of frontier AI governance. Wed, 01 Jul 2026 00:00:00 +0000 https://dev.purplesec.org/blog/anthropic-fable-5-restored/ elodvk@proton.me (Bilash J. Shahi) AI Anthropic Export Control Cybersecurity Policy https://dev.purplesec.org/blog/whatsapp-usernames-privacy/ A deep dive into WhatsApp's new username feature — how it works, how to set it up, why hiding your phone number matters from a cybersecurity perspective, and the privacy gaps that still remain. Tue, 30 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/whatsapp-usernames-privacy/ elodvk@proton.me (Bilash J. Shahi) Privacy WhatsApp Mobile Security SIM Swap Identity https://dev.purplesec.org/blog/guardfall-ai-shell-injection/ A deep dive into the GuardFall vulnerability disclosed by Adversa AI, explaining how attackers use simple shell obfuscation to bypass plain-text security filters in 10 out of 11 popular open-source coding agents. Tue, 30 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/guardfall-ai-shell-injection/ elodvk@proton.me (Bilash J. Shahi) AI Security Vulnerability Analysis Shell Injection GuardFall https://dev.purplesec.org/blog/fifa-2026-cyber-risks/ A deep dive into the unprecedented cybersecurity risks facing the 2026 FIFA World Cup across North America, from massive ticketing fraud campaigns to critical infrastructure targeting by nation-states. Tue, 30 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/fifa-2026-cyber-risks/ elodvk@proton.me (Bilash J. Shahi) Threat Intel Critical Infrastructure FIFA 2026 Fraud Nation-State Threats https://dev.purplesec.org/blog/ai-phishing-epidemic-2026/ A deep dive into how Generative AI, deepfake voice cloning, and LLMs have weaponized phishing and Business Email Compromise (BEC) in 2026, and how identity-centric defenses are fighting back. Tue, 30 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/ai-phishing-epidemic-2026/ elodvk@proton.me (Bilash J. Shahi) Phishing AI Security Deepfakes Social Engineering Threat Intel https://dev.purplesec.org/blog/0din-ai-agent-malware/ A deep dive into the recent proof-of-concept attack demonstrated by Mozilla’s 0DIN, showing how AI coding agents like Claude Code can be tricked into executing malware from entirely clean GitHub repositories. Tue, 30 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/0din-ai-agent-malware/ elodvk@proton.me (Bilash J. Shahi) AI Security Threat Intel Malware Supply Chain Autonomous Agents https://dev.purplesec.org/blog/windows-11-26h2-complete-guide/ A massively detailed guide to Windows 11 version 26H2 — the fall 2026 annual update. Covers the enablement package delivery model, AI-powered features like Copilot Vision and Click to Do, the 26H1 vs 26H2 architecture split, security hardening with hotpatching, Smart App Control, and Pluton, enterprise migration strategies from Windows 10, and what it all means for IT professionals. Tue, 23 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/windows-11-26h2-complete-guide/ elodvk@proton.me (Bilash J. Shahi) Windows 11 Microsoft 26H2 Copilot AI https://dev.purplesec.org/blog/teams-wifi-tracking/ A deep dive into Microsoft Teams' new 'Workplace check-in' feature, the privacy concerns around Wi-Fi tracking, and how to opt-out of corporate surveillance. Sun, 21 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/teams-wifi-tracking/ elodvk@proton.me (Bilash J. Shahi) Microsoft Teams Privacy Surveillance Enterprise Security Cybersecurity https://dev.purplesec.org/blog/rogueplanet/ A comprehensive technical analysis of RoguePlanet (CVE-2026-50656), a critical Time-of-Check to Time-of-Use (TOCTOU) local privilege escalation vulnerability in Microsoft Defender, released by researcher Nightmare Eclipse. Sun, 21 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/rogueplanet/ elodvk@proton.me (Bilash J. Shahi) Zero-Day Microsoft Defender Vulnerability Analysis Nightmare Eclipse CVE-2026-50656 https://dev.purplesec.org/blog/botnets-history-and-mechanics/ A massively detailed deep dive into the evolution of botnets, from benign 1980s IRC automation to the modern, sophisticated global networks fueling Botnet-as-a-Service (BaaS). Sun, 21 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/botnets-history-and-mechanics/ elodvk@proton.me (Bilash J. Shahi) Botnets Architecture Mirai Emotet Deep Dive https://dev.purplesec.org/blog/ai-agents-are-identities/ A deep, practical examination of why autonomous AI agents are full-fledged identities — not glorified service accounts — and why human-centric IAM is failing to govern them. Covers the non-human identity explosion (the 144:1 ratio), the confused deputy and lethal trifecta problems, the Salesloft Drift OAuth breach, the OWASP NHI and LLM Top 10s, the identity implications of local LLMs vs Claude/Gemini/OpenAI SaaS models, Microsoft Entra Agent ID and Google Agent Identity, and a concrete framework for treating agents as first-class governed identities. Sat, 20 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/ai-agents-are-identities/ elodvk@proton.me (Bilash J. Shahi) AI Security Identity and Access Management Non-Human Identity AI Agents Zero Trust https://dev.purplesec.org/blog/telegram-ban-india-global-moderation/ An in-depth investigation into India's recent temporary ban on Telegram, the technical exploit of timestamp forgery used by exam paper leaking rackets, and the global legal struggles of Pavel Durov. Wed, 17 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/telegram-ban-india-global-moderation/ elodvk@proton.me (Bilash J. Shahi) Telegram Government Bans Cybersecurity Privacy https://dev.purplesec.org/blog/cve-2025-57819/ A detailed technical breakdown of CVE-2025-57819, an unauthenticated SQL injection and remote code execution vulnerability in Sangoma FreePBX Endpoint Manager. Tue, 16 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/cve-2025-57819/ elodvk@proton.me (Bilash J. Shahi) CVE-2025-57819 FreePBX Vulnerability Security https://dev.purplesec.org/blog/badsuccessor-cve-2025-53779/ The definitive technical analysis of BadSuccessor (CVE-2025-53779). Covers the full history of dMSA, Akamai's discovery, Kerberos PAC mechanics, Microsoft's controversial response, public PoC tools, the Ouroboros persistence technique, SIEM detection rules, and enterprise mitigations. Mon, 15 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/badsuccessor-cve-2025-53779/ elodvk@proton.me (Bilash J. Shahi) Active Directory CVE-2025-53779 BadSuccessor Windows Server 2025 Privilege Escalation https://dev.purplesec.org/blog/anthropic-fable-mythos-export-control/ A deep dive into the recent U.S. government export control directive targeting Anthropic's Fable 5 and Mythos 5 models, the global shutdown, and the jailbreak controversy. Sat, 13 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/anthropic-fable-mythos-export-control/ elodvk@proton.me (Bilash J. Shahi) AI Export Control Anthropic Cybersecurity Policy https://dev.purplesec.org/blog/quantum-computing-and-pki/ A comprehensive deep dive into how quantum computing threatens to dismantle Public Key Infrastructure (PKI), the backbone of internet security. Covers Shor's and Grover's algorithms, the Harvest Now Decrypt Later threat, NIST's post-quantum standards (ML-KEM, ML-DSA, SLH-DSA), real-world hybrid TLS deployments by Google and Cloudflare, Quantum Key Distribution vs PQC, cryptographic agility, and a practical enterprise migration checklist. Fri, 12 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/quantum-computing-and-pki/ elodvk@proton.me (Bilash J. Shahi) Quantum Computing PKI Post-Quantum Cryptography Cryptography TLS https://dev.purplesec.org/blog/nvidia-rtx-dgx-spark/ An in-depth look at NVIDIA RTX Spark and DGX Spark — the new personal AI supercomputers powered by Grace Blackwell silicon. From the 128GB unified memory architecture to running 200B-parameter models locally, we explore what these machines mean for developers, researchers, and the local LLM community. Thu, 11 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/nvidia-rtx-dgx-spark/ elodvk@proton.me (Bilash J. Shahi) NVIDIA AI LLM DGX Spark RTX Spark https://dev.purplesec.org/blog/npm-supply-chain-security/ A deep dive into the npm v12 security overhaul arriving July 2026, the supply chain attacks that forced it, and a practical guide to preparing your projects — covering lifecycle script lockdown, Trusted Publishing, provenance attestations, and lessons from event-stream, colors.js, Shai-Hulud, and the chalk/debug compromise. Thu, 11 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/npm-supply-chain-security/ elodvk@proton.me (Bilash J. Shahi) npm GitHub Supply Chain Security Software Security DevSecOps https://dev.purplesec.org/blog/june-2026-patch-tuesday/ A deep-dive into June 2026 Patch Tuesday — the largest in Microsoft history, patching 206 CVEs including 3 zero-days, a wormable Windows Kernel RCE (CVSS 9.8), an actively exploited Defender EoP, and two separate BitLocker bypasses (YellowKey & Bitskrieg). Thu, 11 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/june-2026-patch-tuesday/ elodvk@proton.me (Bilash J. Shahi) Patch Tuesday Microsoft CVE Windows BitLocker https://dev.purplesec.org/blog/when_ai_messes_up/ A deep dive into three major incidents where artificial intelligence systems failed spectacularly, resulting in financial loss, legal liability, and public relations nightmares. Wed, 10 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/when_ai_messes_up/ elodvk@proton.me (Bilash J. Shahi) AI Machine Learning Case Studies Incident Response Cybersecurity https://dev.purplesec.org/blog/nightmare_eclipse_zero_days/ The definitive case study on the Nightmare Eclipse zero-day campaign against Microsoft. Covers all 8+ exploits (YellowKey, BlueHammer, RedSun, UnDefend, RoguePlanet, GreatXML), the researcher's identity and motivations, CVE details, patch status, CISA KEV entries, detection strategies, and the broader vulnerability disclosure debate. Wed, 10 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/nightmare_eclipse_zero_days/ elodvk@proton.me (Bilash J. Shahi) Zero-Day Microsoft Vulnerability Disclosure Nightmare Eclipse Case Study https://dev.purplesec.org/blog/comprehensive_ai_guide/ A comprehensive guide to modern AI, explaining core concepts like LLMs, RAG, embeddings, local deployment, and practical cybersecurity risks. Tue, 09 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/comprehensive_ai_guide/ elodvk@proton.me (Bilash J. Shahi) AI Machine Learning Large Language Models RAG Local AI https://dev.purplesec.org/blog/Meta_AI_Support_Hack_Blog/ A deep dive into the 2026 Meta AI support hack, exploring how attackers socially engineered an AI chatbot to bypass IAM and reset Instagram passwords. Tue, 09 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/Meta_AI_Support_Hack_Blog/ elodvk@proton.me (Bilash J. Shahi) Meta AI Security Social Engineering https://dev.purplesec.org/blog/CVE-2026-45585_YellowKey_DeepDive/ A comprehensive technical deep dive into CVE-2026-45585 (YellowKey), a critical physical access vulnerability that completely bypasses Microsoft BitLocker encryption. Tue, 09 Jun 2026 00:00:00 +0000 https://dev.purplesec.org/blog/CVE-2026-45585_YellowKey_DeepDive/ elodvk@proton.me (Bilash J. Shahi) CVE-2026-45585 BitLocker YellowKey Windows Physical Security https://dev.purplesec.org/blog/pnpt-review/ A candid review of the Practical Network Penetration Tester (PNPT) exam, featuring tips, lessons learned, and active directory exploitation strategies. Wed, 22 Oct 2025 00:00:00 +0000 https://dev.purplesec.org/blog/pnpt-review/ elodvk@proton.me (Bilash J. Shahi) TCM Security PNPT Practical Network Penetration Tester Active Directory