Security

This week's threat intel digest: ransomware loader shifts, actively exploited CVEs, and how adversaries abuse AI agent tooling in software supply chains. Verified facts, hands-on detection guidance for blue teams.

Build a safe GraphQL attack lab: chain introspection, query depth abuse, and field-level auth bypass, then defend with persisted queries and cost limits. Step-by-step tutorial for security learners and blue teams.

Hands-on SSRF lab: exploit a vulnerable URL-fetch parameter, pivot to cloud metadata endpoints, then enforce allowlist defenses. Verified commands and configs for blue teams and CTF players.

This week's threat intel: exploited CVEs, ransomware affiliates adopting AI agent tooling, stealer-to-ransomware handoff tradecraft, and hands-on blue-team detection guidance for 22 September 2026.

This week's threat intel roundup: OAuth third-party app abuse, actively exploited Autumn 2026 CVEs, and malware loader trends — with defender actions mapped to each tradecraft pattern.

Hands-on tutorial: configure GitHub Actions OIDC federation to cloud IAM, then walk through real misconfigurations that let attackers mint cloud…

Build a safe, vulnerable minikube lab and practice real container escape techniques step by step: privileged pods, hostPath mounts, service account abuse, and node privilege escalation — with verified commands and blue-team detection tips.

Supply-chain compromise of a maintained npm package, active exploitation of autumn KEV CVEs, and infostealer delivery trends — the week’s threat picture and what defenders should do about each.