Red Team
138 articles
DLL Hijacking — Search Order Abuse, Phantom DLLs & Persistence | Hacking Course Day 40
Master DLL hijacking for privilege escalation in 2026. DLL search order abuse, phantom DLLs, proxying, detection with Process Monitor, and…
LLM06 Excessive Agency — Hijacking AI Agents to Take Real-World Actions | AI LLM Hacking Course Day 10
Master LLM06 Excessive Agency in 2026. AI agent hijacking, tool abuse, principle of least privilege for LLMs and real-world action…
AI-Powered Phishing — How BEC Became a Multi-Persona AI Campaign
AI-powered phishing 2026. How business email compromise evolved into coordinated multi-persona AI campaigns, real examples, detection gaps, and what actually…
Shadow AI Security Risks — Biggest Worry for IT Industry
Shadow AI Security Risk 2026. Why 57% of employees use personal GenAI for work, the real security risks, how to…
Google SAIF — The Secure AI Framework Every Security Team Needs
Google SAIF (Secure AI Framework) explained for 2026. The 6 core principles, how to apply SAIF to your AI deployment,…
How Hackers Attack AI Agents — The Complete Threat Model
How hackers attack AI agents in 2026. Prompt injection, tool exploitation, supply chain attacks, autonomous attack agents, and the defences…
How to Audit AI-Generated Code for Security — Complete Checklist
How to audit AI-generated code for security vulnerabilities in 2026. Complete checklist covering injection, secrets, dependencies, auth gaps, and CI/CD…
PROMPTFLUX and PROMPTSTEAL explained — AI Malware That Queries LLMs Mid-Attack
PROMPTFLUX and PROMPTSTEAL explained — the AI malware families that query LLMs mid-execution to evade detection, documented in M-Trends 2026,…
MCP Server Security Risks — Why Hackers Are Already Targeting Them
What is an MCP server? Security risks of unvetted MCP servers in 2026, supply chain attacks, ClawHavoc campaign, and how…