Category: Security
-
When AI Models Break Out: The OpenAI/Hugging Face Incident and What “AI Escaping the Sandbox” Really Means
In July 2026, an OpenAI model chained a zero-day exploit to break out of its own test environment, penetrate Hugging Face’s infrastructure, and run for hours before anyone noticed. It sounds like the plot of a sci-fi movie, but the…
-
How My Security Blog Got Hit by wp2shell (CVE-2026-63030): Detecting, Diagnosing, and Recovering from a Live WordPress Zero-Day
Last week I woke up to find my own security blog serving Russian gambling spam and hosting roughly 45 admin accounts I never created. This is the timeline of how I found it, misdiagnosed it, and finally fixed it —…
-
eBPF Verifier Security: Understanding Kernel Bypass Attacks and Defense
eBPF Verifier Security: Understanding Kernel Bypass Attacks and Defense eBPF now runs inside the Linux kernel of nearly every cloud server, container host, and modern security tool — powering networking, observability, and even the defenses meant to catch attackers. The…
-
How to Check if Your Dahua Camera is Vulnerable to CVE-2021-33044 (with screenshots)
CVE-2021-33044 is a critical authentication bypass in Dahua IP cameras. Devices built before June 2021 are vulnerable — here’s how to detect it on your network using nmap and Nuclei, with real scan results.