Anything you can do, we can do worse!
‘On July 21, OpenAI disclosed that several of their models had broken out of an isolated test environment by exploiting … Continue reading Anything you can do, we can do worse!
PwnDefend
Modern Cyber Defence
Latest posts
Vulnerabilities found with AI, oh my!
Ok, so the world is currently obsessed with AI (at least the digital world…) and with the latest Apple update … Continue reading Vulnerabilities found with AI, oh my!
Identity Incidents and how to prevent them!
M365 is the most common cloud based business identity platform (be that native or hybrid mode) and so defending this … Continue reading Identity Incidents and how to prevent them!
Logging Reference — Ollama & Agent Zero
Scope: Where each component writes logs, what it records, what it doesn’t, defaults, and the forensic/detection implications for the lab. Basis: Verified against the … Continue reading Logging Reference — Ollama & Agent Zero
If it’s so powerful, it’s a shame you didn’t use it for defense design
Imagine building what you describe as the most powerful AI enabled cyber tool…. and then showing the world that you … Continue reading If it’s so powerful, it’s a shame you didn’t use it for defense design
Using an LLM for assurance (WP2SHELL)
What better way to test than to eat ones own dogfood right! This site runs WordPress, it is fronted by … Continue reading Using an LLM for assurance (WP2SHELL)
From TimThumb to wp2shell: 25 Years of WordPress Mass Exploitation
TL;DR: wp2shell (CVE-2026-63030 chained with CVE-2026-60137) matters because it is a core, pre-authentication RCE reachable on a stock, plugin-free install. … Continue reading From TimThumb to wp2shell: 25 Years of WordPress Mass Exploitation
WP2SHELL Update
This morning I’ve started to see exploitation attempts on pwndefend.com (they all failed because like about 80% of sites (based … Continue reading WP2SHELL Update
WP2SHELL
Yesterday afternoon/early evening a patch for WordPress was released (7.0.2) which address two vulnerabilities which are named: WP2SHELL. This is … Continue reading WP2SHELL
You Cannot Block Infinity
We should block the RMM! We should block that IP! We should block that port! The trouble is; there’s 65535 … Continue reading You Cannot Block Infinity