--- title: "Rokkhe (@rokkhe) | Hashnode" description: "AI pentesting & AI defensive security. NVIDIA Inception member. Read the latest articles by Rokkhe on Hashnode." url: "https://hashnode.com/@rokkhe" --- @rokkhe # Rokkhe @rokkhe · Strasbourg, France · Joined November 2026 AI pentesting & AI defensive security. NVIDIA Inception member. [Website](https://rokkhe.com/) ### [Test and fix the OWASP Top 10 2025 in your web app this week](https://rokkhe.hashnode.dev/test-fix-owasp-top-10-2025-web-app?utm_source=hashnode&utm_medium=feed) A hands-on pass of the 2025 list: access control first, then configuration, injection, authentication, logging and exceptional conditions. 10 min read · [rokkhe.hashnode.dev](https://rokkhe.hashnode.dev/test-fix-owasp-top-10-2025-web-app?utm_source=hashnode&utm_medium=feed) [6h ago](https://hashnode.com/posts/test-fix-owasp-top-10-2025-web-app/6af85448fa21071a5bb657de) ### [Pin your GitHub Actions by commit SHA and lock workflow permissions](https://rokkhe.hashnode.dev/pin-github-actions-sha-lock-workflow-permissions?utm_source=hashnode&utm_medium=feed) Replace movable tags with a 40-character SHA, set GITHUB\_TOKEN to read-only by default, and treat pull\_request\_target as a privileged event. 11 min read · [rokkhe.hashnode.dev](https://rokkhe.hashnode.dev/pin-github-actions-sha-lock-workflow-permissions?utm_source=hashnode&utm_medium=feed) [2](https://hashnode.com/posts/pin-github-actions-sha-lock-workflow-permissions/6af7d3e2d56015c06c15b210) [15h ago](https://hashnode.com/posts/pin-github-actions-sha-lock-workflow-permissions/6af7d3e2d56015c06c15b210) ### [CVE-2026-123039: How PHP2Shell Became Root on Check Point Gateways, and How to Close It](https://rokkhe.hashnode.dev/cve-2026-123039-how-php2shell-became-root-on-check-point-gateways-and-how-to-close-it?utm_source=hashnode&utm_medium=feed) Vulnerability briefing · 13 November 2026 · By the Rokkhe research team CVE-2026-123039 is a high-severity (CVSS 7.8) privilege escalation in the DynamicCLI service of Check Point Gaia OS. On 12 Novem 9 min read · [rokkhe.hashnode.dev](https://rokkhe.hashnode.dev/cve-2026-123039-how-php2shell-became-root-on-check-point-gateways-and-how-to-close-it?utm_source=hashnode&utm_medium=feed) [1d ago](https://hashnode.com/posts/cve-2026-123039-how-php2shell-became-root-on-check-point-gateways-and-how-to-close-it/6af6e840cb278d13e11d3a2d)