Vulnerabilities
GhostPack Necromancy: Reforging C# Tools with WasmForge
In the previous post we walked through WasmForge, our Go-to-WebAssembly loader that takes existing signatured Go tools and ships them as opsec-safe binaries. This approach doesn’t just apply to Go, however, as ...
FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2)
Overview Earlier this year, a team at Praetorian was building Constantine, our automated 0-day discovery engine. I wanted to find techniques worth folding into it, so on the side I started poking ...
How Frontier AI Models Are Reshaping Cyber Defense
 The latest developments in AI and cybersecurity, focusing on how frontier models like Mythos are changing the threat landscape by collapsing patch windows weeks to minutes, and what organizations need to do ...
CVE-2026-35273: Active Exploitation of Oracle PeopleSoft Zero-Day Vulnerability
Oracle has disclosed CVE-2026-35273, a critical vulnerability in PeopleSoft Enterprise PeopleTools that has already been exploited by threat actors. The vulnerability allows unauthenticated attackers to remotely compromise vulnerable systems and. The post ...
The Shift to Threat-Informed Prioritization: Operationalizing CISA BOD 26-04
In this post, we examine how CISA BOD 26-04 shifts the industry away from flat CVSS scoring and details how Flashpoint bridges the critical data gaps left by public vulnerability repositories The ...
Claude Fable 5 and Mythos 5 “abruptly disabled” after US gov. ban
Anthropic has been ordered by the US government to cut off its newest Claude Fable 5 and Mythos 5 models for fear of abuse ...
What to Do When You Receive a Bug Bounty Email
A stranger emails saying they found a security hole in your site and would like a reward. Is it a genuine researcher, a low-effort "beg bounty," or extortion? Here is how to ...
Mythos 5 Restricted by US Government for Being Too Dangerous
 For those of you who have been questioning the power and impact of Mythos, claiming the initial restricted use (Project Glasswing) was just a marketing ploy, I urge you to reconsider and ...
Oracle Issues Emergency Guidance as PeopleSoft Flaw Linked to Widespread Data Theft
A critical security vulnerability in Oracle’s PeopleSoft software has been linked to a large cyber campaign that may have affected more than 100 organizations, prompting urgent warnings from Oracle and cybersecurity investigators ...
What Are The 5 Steps of Vulnerability Management?
The world has accepted the gift of artificial intelligence, and that includes both hackers and the organizations vulnerable to attacks. With the base being the same for both attackers and defenders, the ...
