Skip to content

Forem

Ksenia Rudneva

I hunt for vulnerabilities and explore how attacks really work. Expect deep dives into protocols, packet‑level mysteries, and surprising weak spots in everyday systems.

Joined on Feb 19, 2026

Mar 26

NTLM-Relaying Attacks Persist Due to Lack of EPA Enforcement on Web Servers: Implementing EPA Mitigates Risk

#ntlm #epa #cybersecurity #webservers

12 min read

Mar 25

Navia Benefit Solutions' BOLA Vulnerability Exposed PII of 10,000+ Employees Due to Inadequate Access Controls

#bola #cybersecurity #pii #accesscontrol

14 min read

Mar 25

Age-Verification Integration in Internet Infrastructure Raises Technical, Legal, and Privacy Concerns

#internet #security #privacy #regulation

14 min read

Mar 22

Agent Skill Marketplace Vulnerable to Supply Chain Attacks: Standardized Security Scanning Proposed

#security #github #ai #supplychain

14 min read

Mar 21

ONNX `silent=True` Disables Security Checks, Exposing ML Models to Supply Chain Attacks: Solution Needed

#onnx #security #machinelearning #supplychain

11 min read

Mar 21

DarkSword iOS Exploit Analysis: Evaluating Lookout's LLM-Assisted Findings Against Other Research Teams

#cybersecurity #ai #darksword #ios

12 min read

Mar 20

Claude Code CLI Vulnerability: Malicious Configs Bypass Trust Dialog, Enabling Unauthorized Permission Elevation

#security #vulnerability #cli #permissions

10 min read

Mar 20

Simplifying Cybersecurity Frameworks: Practical Solutions for Startups to Implement ISO 27001 and NIST

#cybersecurity #startup #iso27001 #nist

11 min read

Mar 20

AI/ML Infrastructure Vulnerabilities Expose Systems to Security Risks: Patching and Mitigation Strategies Proposed

#security #aiml #vulnerabilities #rce

13 min read

Mar 19

GlassWorm Malware Campaign Steals Crypto Seeds via Obfuscation, Chrome Exploit, and Social Engineering: Mitigation Strategies

#malware #cryptocurrency #obfuscation #exploitation

10 min read

Mar 18

Efficiently Locating and Analyzing PoC Code for CVEs with Contextual Information Integration

#cybersecurity #poc #cve #ai

8 min read

Mar 18

Windows Vulnerability CVE-2025-59284: Incomplete Patch Enables NetNTLM Hash Phishing During Archive Extraction

#windows #vulnerability #netntlm #patching

14 min read

Mar 17

Self-Hosted Email Threat Detection: Real-Time Monitoring, Multi-Stage Enrichment, and LLM Verdicts with Legal Compliance

#cybersecurity #email #selfhosted #llm

15 min read

Mar 16

Enhancing Cybersecurity with Hypervisors: Current Practices, Future Advancements, and Nova Design Rationale

#cybersecurity #hypervisor #virtualization #isolation

9 min read

Mar 16

Addressing Security Risks: Replacing Unscoped API Keys with Fine-Grained Access Control in AI Agent Frameworks

#security #ai #api #authentication

11 min read

Mar 15

66% of MCP Servers Have Critical Security Vulnerabilities: Urgent Patching and Audits Needed

#security #vulnerabilities #mcp #patching

13 min read

Mar 13

Alipay App Vulnerabilities Enable Silent GPS Exfiltration; Vendor Denies Issue Despite High CVSS Scores

#security #vulnerabilities #gps #exfiltration

10 min read

Mar 10

Microsoft's Software Ecosystem Faces 79 Vulnerabilities: Urgent Patching and Mitigation Strategies Required

#cybersecurity #vulnerabilities #patching #zerodays

16 min read

Mar 10

Drywall Foreman in Ontario Demands $35/Hour Wage Review: Is the Pay Fair for the Responsibilities and Workload?

#compensation #construction #leadership #risk

13 min read

Mar 5

Pac4j-JWT Authentication Bypass Vulnerability Undetected for Six Years Despite Advanced Security Tools

#security #vulnerability #ai #auditing

9 min read

Mar 4

Basic Operator Exploits Weak FortiGate Passwords in 55 Countries Using AI, Compromising 600+ Devices Without Zero-Days.

#cybersecurity #ai #fortigate #passwords

12 min read

Mar 4

Phishing Campaign Exploits Google Cloud Storage Domain: Redirects to Credential Harvesting Sites

#phishing #cloud #security #exploitation

8 min read

Mar 2

Post-Quantum TLS Signatures Increase Handshake Size: Solutions to Mitigate Performance and Compatibility Issues

#quantum #tls #cryptography #latency

13 min read

Mar 1

Navigating Legal and Compliance Challenges in Tech Content Aggregation: Balancing Data Privacy, IP Rights, and Liability Risks

#compliance #iprights #dataprivacy #liability

8 min read

loading...