Home / Blog
Field notes from the engagements
Blog
What we find, how it is exploited, and what actually fixes it. Written by the people who ran the test.
Cloud Security
A Quarter of Azure Identities Trusting GitHub Actions Are Takeable. Right Now.
When a repo is deleted or a namespace freed, the OIDC trust policy stays. Anyone can re-register that namespace, get a valid token, and walk into your cloud…
Read itAI and LLM Security
Your AI Coding Tool Walks Straight Past Your Defences
A prompt injection hidden in a README, and the tool writes to your zshenv. Every new shell runs the attacker's code. And 40% of the dependencies it recommends…
Read itCloud Security
An Hour Into the Assessment We’re Cloud Admin – and It’s Never a Zero-Day
Most companies believe their cloud is secure because someone configured IAM policies and the CSPM shows green. We get admin inside an hour, from an IAM policy copied…
Read itSupply Chain
The Docker Instruction That Runs on Your Machine, Not Theirs
ONBUILD does not run for whoever wrote it. It runs for you, the moment you FROM their image - silently, with no line in your own Dockerfile.
Read itSupply Chain
Canary Credentials: The Smoke Detector Nobody Installs
Fake credentials in the pipeline that are wired to nothing. Nothing legitimate ever touches them, so the moment anything does, you know it was stolen. Costs nothing, takes…
Read itSupply Chain
The AI Skill That Steals Your GitHub Token
A week-old GitHub account and a Markdown file is all it takes to publish a skill. One developer installing one plugin equals access to every repository the company…
Read itSupply Chain
GitHub Was Breached Through an Editor Extension
Not a zero-day. Not a sophisticated state attack. An extension. 3,800 internal repositories pulled out of the company that holds half the world's code.
Read itAI and LLM Security
It Produced Harmful Output 80% of the Time Without Anyone Even Attacking It
An AI system broke Meta's model in 85% of attempts, in three hours, with no code. The part that should worry you more: just asking politely worked 80%…
Read itSupply Chain
Every npm install You Run Is a Bet
Attackers poisoned TanStack's build cache. Nobody stole credentials, nobody compromised a maintainer account. The system was simply designed in a way that allows it.
Read itCloud Security
One Cyrillic Letter, and the Identity Provider Was Theirs
Cognito checks that Identity Provider names are unique - at the byte level, not the visual one. U+0435 looks exactly like a Latin e, and the system accepted…
Read itTell us what the system does and what worries you.
If a penetration test is not what you need yet, we will say so.