PHP2Shell: Two Critical PHP Flaws That Could Turn a Website Into an Attacker’s Entry PointThe Internet Has a PHP Problem Imagine visiting your favourite website, logging into your account, or making an online payment. Everything looks normal. There is no suspicious download, no malicious a6d ago · 19 min readviditp.hashnode.dev
The eMudhra Certificate Compromise: The Internet Trusted a Private Key That Was Literally the Number 4Eight intermediate CA keys. A key-generation failure. And a reminder that strong cryptography means nothing if the secret is predictable. That is not a test fixture from a cryptography tutorial. That Oct 21 · 8 min readviditp.hashnode.dev
🛡️ Reverse Engineering a WhatsApp-Propagated Android Malware APK⚠️ Disclaimer This research was conducted strictly for educational and defensive purposes.All analysis was performed in an isolated lab environment.No malicious activity was executed against real systems or networks. The intent of this article is to ...Jan 11 · 12 min readviditp.hashnode.dev
React2Shell: A Technical Deep Dive into CVE-2025-55182—Priority-0 RCE Alert and Remediation Guide for Next.js and React Server ComponentsI. Executive Mandate: Maximum Severity Alert (CVSS 10.0) A. Statement of Urgency and Impact This report serves as a maximum-severity alert regarding the critical vulnerability designated as CVE-2025-55182, widely referred to as React2Shell. This flaw...Dec 7, 2025 · 15 min readviditp.hashnode.dev
CSPM, WAF & Agentic AI Security in a Modern SOCIntroduction: When AI Becomes Part of the Security Perimeter The traditional Security Operations Center (SOC) model—human-driven alert investigation and remediation—is rapidly evolving. Today, Agentic AI systems are taking over incident investigation...1CNov 28, 2025 · 8 min readviditp.hashnode.dev
