// blog

Writing & Research

Writeups, research notes, and things I figured out the hard way.

JADEPUFFER: Inside the First Documented Agentic Ransomware Attack

AI Security & Incident Analysis  JADEPUFFER: Inside the First Documented Agentic Ransomware Attack       July 2026    Cybersecurity Research Notes    ~7 min

Read →

What 81 Million Failed logins actually get an attacker

Identity & Detection Engineering What 81 Million Failed Logins Actually Buy an Attacker July 2026 Cybersecurity Research Notes ~6 min

Read →

A trading bot lost $15 million because an attacker fed it fake opportunities

The JaredFromSubway Ethereum MEV bot, one of the better-known maximal-extractable-value bots operating on-chain, lost about $15 million after an attacker

Read →

RoguePlanet: an unpatched Windows Defender flaw grants SYSTEM privileges

## What happened A researcher using the alias Nightmare Eclipse (also Chaotic Eclipse) publicly released an exploit for a Windows Defender

Read →

MCPwn — The nginx-ui Auth Bypass That Hands Attackers the Keys to Your Server

Critical CVE-2026-33032 CVSS 9.8 A missing authentication middleware on a single HTTP endpoint is all it takes. Attackers are

Read →

Hello world!

Hey everyone, my name is Alex and I'm 21. Welcome to my blog. I'm a computer

Read →