2026  11

April  1

Dissecting a Weaponized Atera Installer: How a Fake Bank Statement Grants Full Remote Access

April 7, 2026 · 9 min · 1805 words · Animeh Roy

March  7

How TeamPCP Poisoned Security Scanners to Backdoor LiteLLM

March 26, 2026 · 11 min · 2192 words · Animeh Roy

Poisoned Packages: How npm Lifecycle Scripts Became a Supply Chain Weapon

March 21, 2026 · 8 min · 1540 words · Animeh Roy

SWE-CI: Can AI Agents Actually Maintain Code Long-Term?

March 19, 2026 · 7 min · 1360 words · Animesh Roy

LeakyLooker: 9 Critical Google Looker Studio Vulnerabilities Exposed

March 18, 2026 · 11 min · 2318 words · Animesh Roy

Gemini Embedding 2: What’s Changed and Why Security Teams Should Care

March 14, 2026 · 10 min · 1957 words · Animesh Roy

Quishing in the Wild: Anatomy of a Corporate HR Lure Using QR Codes, AWS S3, and Cloudflare Turnstile

March 11, 2026 · 8 min · 1554 words · Animesh Roy

Coruna: The iOS Exploit Kit That Went From Spyware Vendor to Mass Crypto Theft

March 8, 2026 · 8 min · 1647 words · Animeh Roy

February  3

Dissecting a Real Estate BEC Phishing Chain: From Fake Stewart Title Closing Docs to Multi-Layer Encrypted AiTM Router

February 25, 2026 · 22 min · 4505 words · Animeh Roy

Dissecting a BEC Phishing Chain: From Fake Payment Advice to Real-Time Google AiTM Credential Harvester

February 24, 2026 · 11 min · 2325 words · Animeh Roy

Dissecting a Two-Stage Indian Banking Trojan: From Fake eChallan to Full Device Compromise

February 19, 2026 · 12 min · 2455 words · Animeh Roy

Found this useful? Help keep the content coming.

Buy Me a Coffee
Privacy Policy • Terms of Service