Megha BL (@Meghabl)

Claude Mythos: When an AI Gets Too Good at Hacking to Release

There's a strange kind of headline that only makes sense in 2026: an AI company builds its most powerful model ever — and decides not to sell it. That's exactly what happened with Anthropic's Claude M

Jun 12 · 8 min readshesecures.in

The GitHub RCE That Could Have Compromised Millions of Repositories: CVE-2026-3854 — And How Qualys Helps You Find It

Let me be honest with you — when I first read about this one, I paused and re-read it twice. Before we dive in — what is GitHub, and why does this matter? If you work in security but haven't spent muc

May 24 · 18 min readshesecures.in

From Generative to Agentic: How AI Got Its Own Hands

There's a moment in every good thriller where the antagonist stops taking orders and starts making decisions. That's roughly what happened with AI over the last two years. In November, we talked about

Apr 26 · 11 min readshesecures.in

OWASP Top 10 (2025 Edition)

Introduction If you read my earlier post on the OWASP Top 10 (2021), you'll remember I ended it with a section on what changes were expected in the 2025 edition. Well — it's here. And it's more signif

Mar 14 · 1 min readshesecures.in

The Dark Side of AI: Hallucinations, Attacker Playbooks, and What Defenders Must Know

In November, I wrote about how AI is transforming cybersecurity for the better — faster detection, smarter vulnerability prioritisation, SOC automation that actually works. I meant every word of it. B

Feb 11 · 15 min readshesecures.in

Megha BL

About

Available for

Megha BL's blogs

Claude Mythos: When an AI Gets Too Good at Hacking to Release

The GitHub RCE That Could Have Compromised Millions of Repositories: CVE-2026-3854 — And How Qualys Helps You Find It

From Generative to Agentic: How AI Got Its Own Hands

OWASP Top 10 (2025 Edition)

The Dark Side of AI: Hallucinations, Attacker Playbooks, and What Defenders Must Know

Megha BL

About

Available for

Megha BL's blogs

Claude Mythos: When an AI Gets Too Good at Hacking to Release

The GitHub RCE That Could Have Compromised Millions of Repositories: CVE-2026-3854 — And How Qualys Helps You Find It

From Generative to Agentic: How AI Got Its Own Hands

OWASP Top 10 (2025 Edition)

The Dark Side of AI: Hallucinations, Attacker Playbooks, and What Defenders Must Know

Megha BL

About

Available for

Megha BL's blogs

Claude Mythos: When an AI Gets Too Good at Hacking to Release

The GitHub RCE That Could Have Compromised Millions of Repositories: CVE-2026-3854 — And How Qualys Helps You Find It

From Generative to Agentic: How AI Got Its Own Hands

OWASP Top 10 (2025 Edition)

The Dark Side of AI: Hallucinations, Attacker Playbooks, and What Defenders Must Know

Search Hashnode

Megha BL

About

Available for

Megha BL's blogs

Claude Mythos: When an AI Gets Too Good at Hacking to Release

The GitHub RCE That Could Have Compromised Millions of Repositories: CVE-2026-3854 — And How Qualys Helps You Find It

From Generative to Agentic: How AI Got Its Own Hands

OWASP Top 10 (2025 Edition)

The Dark Side of AI: Hallucinations, Attacker Playbooks, and What Defenders Must Know