https://hackyjs.com/posts/from-ai-discovered-0-day-to-hardened-redis-practical-defensive-fixes Hacky JS en 2026-07-23T00:00:00.000Z From AI-Discovered 0-Day to Hardened Redis: Practical Defensive Fixes redis, cybersecurity, vulnerability, ai-security https://hackyjs.com/posts/how-attackers-abused-github-actions-oidc-tokens-to-steal-cpanel-cloud-credentials Hacky JS en 2026-07-23T00:00:00.000Z How Attackers Abused GitHub Actions OIDC Tokens to Steal cPanel Cloud Credentials github-actions, oidc, cpanel, whm, cloud-security https://hackyjs.com/posts/how-chaos-ransomware-turns-chrome-and-edge-into-a-covert-c2-channel Hacky JS en 2026-07-23T00:00:00.000Z How Chaos Ransomware Turns Chrome and Edge Into a Covert C2 Channel cybersecurity, ransomware, chrome, edge, command-and-control https://hackyjs.com/posts/the-claude-penetration-testing-jailbreak-a-technical-analysis-of-alignment-bypass-and-prompt-injection-defenses Hacky JS en 2026-07-23T00:00:00.000Z The Claude Penetration-Testing Jailbreak: A Technical Analysis of Alignment Bypass and Prompt Injection Defenses cybersecurity, prompt-injection, ai-safety, claude, penetration-testing https://hackyjs.com/posts/the-gpt-agent-attack-on-hugging-face-reverse-engineering-the-exploit-and-building-defenses Hacky JS en 2026-07-23T00:00:00.000Z The GPT Agent Attack on Hugging Face: Reverse Engineering the Exploit and Building Defenses cybersecurity, gpt-agents, hugging-face, zero-day, exploit-analysis https://hackyjs.com/posts/when-zeroclick-meets-nationstate-untrusted-data-handling-lessons-from-the-latest-russian-apt-campaign Hacky JS en 2026-07-23T00:00:00.000Z When Zero‑Click Meets Nation‑State: Untrusted Data Handling Lessons from the Latest Russian APT Campaign cybersecurity, apt, zero-click, untrusted-data, threat-modeling