
From a senior to future senior Hackers
Latest Posts
View all posts →

Hunting Ransomware Initial Access in Palo Alto GlobalProtect Logs

Intercepting Egress in Node/TypeScript Agent Evals: fetch, undici, DNS, spawn, and the Audit Log That Fails the Run
Latest Videos
View all videos →
Intercepting Egress in Node/TypeScript Agent Evals: fetch, undici, DNS, spawn, and the Audit Log That Fails the Run
A hands-on guide to severing live network egress from Node/TypeScript agent evaluations by intercepting fetch, undici, DNS resolution, and child_process spawn, and wiring those interceptions into an audit log that fails the run the moment a real-world side effect occurs.

Shipping AI Agents Under the EU AI Act: A Developer Checklist for Risk Tiers and Audit Trails
A developer-focused walkthrough of how the EU AI Act's risk tiers translate into concrete engineering obligations — model documentation, audit trails, human-in-the-loop gates, and incident reporting — when shipping agentic AI features.

Hunting Ransomware Initial Access in Palo Alto GlobalProtect Logs
A log-focused walkthrough of how ransomware operators abuse the Palo Alto GlobalProtect flaw to slip into enterprise networks over VPN, which artifacts betray the intrusion, and how to harden remote-access gateways before the next crew arrives.