Test and fix the OWASP Top 10 2025 in your web app this weekA hands-on pass of the 2025 list: access control first, then configuration, injection, authentication, logging and exceptional conditions.10 min read·rokkhe.hashnode.dev6h ago
Pin your GitHub Actions by commit SHA and lock workflow permissionsReplace movable tags with a 40-character SHA, set GITHUB_TOKEN to read-only by default, and treat pull_request_target as a privileged event.11 min read·rokkhe.hashnode.dev2O15h ago
CVE-2026-123039: How PHP2Shell Became Root on Check Point Gateways, and How to Close ItVulnerability briefing · 13 November 2026 · By the Rokkhe research team CVE-2026-123039 is a high-severity (CVSS 7.8) privilege escalation in the DynamicCLI service of Check Point Gaia OS. On 12 Novem9 min read·rokkhe.hashnode.dev1d ago
