Tag

#red-teaming

22 posts58 followers

Explore Hashnode

Alternatives

Automated Red Teaming Explained

TL;DR: AI agents don't behave the same way every time, so an attack that fails once can still work later. Automated red teaming runs each attack many times, judges what the agent actually did instead

vivekchhediya.hashnode.dev

Prayush HadaAug 3 · 6 min read

Breaking the Trust Boundary: AWS Cognito Guest-to-Authenticated Role Escalation Write up

Introduction AWS Cognito Identity Pools are commonly used in mobile and web applications to provide temporary AWS credentials without exposing long-term access keys. The idea is simple: Anonymous use

prayush.hashnode.dev

Yogeshwar PeelaJul 17 · 19 min read

HackTheBox : Race Writeup

Summary Race is a Linux box built around Grav CMS. The path in is a chain of small information leaks rather than one big bug: an exposed phpsysinfo instance with default creds leaks a process list, th

exploitnotes.hashnode.dev

Tech Skill SchoolJul 15 · 7 min read

AI Agents Are Changing Cyber Attacks: What Security Professionals Need to Know

In early 2026, a mid-sized financial firm experienced something unprecedented. What appeared as a coordinated ransomware attack unfolded in under one hour from initial access to domain-wide encryption

techskillschool.hashnode.dev

OmnithiumJun 21 · 17 min read

Agentic AI Security: Defending Against Adversarial Attacks on Autonomous Agents

The New Security Frontier: Why Agentic AI Breaks Traditional Controls You've hardened your perimeter, deployed WAFs, tuned SIEM rules. Then you ship an LLM agent that reads customer emails, queries in

omnithium.hashnode.dev

OmnithiumJun 19 · 20 min read

Agentic AI Red Teaming: Proactive Security Testing for Autonomous Agents

Why Agentic AI Demands a New Security Paradigm Agentic AI breaks traditional security testing. You can't secure an autonomous agent with single-turn prompts and toxicity checks. The attack surface has

omnithium.hashnode.dev

GitHubOpenSourceMar 29 · 3 min read

Unmasking Digital Footprints: Why theHarvester is Your Reconnaissance Supertool!

📝 Quick Summary: theHarvester is a Python-based OSINT tool designed for the reconnaissance phase of security assessments. It efficiently gathers emails, subdomains, hostnames, and other external information related to a domain by querying numerous p...

github-open-source.hashnode.dev

Habib NajibullahFeb 13 · 11 min read

Context Drift: How I Talked AI Agents Into Giving Up Their Secrets

I've been thinking a lot about how we talk to AI agents and what happens when the conversation goes long enough. Not in a theoretical sense -- I spent about 10 hours in a single session with Pulumi's Neo agent, and somewhere around hour three, someth...

habib0x.com

Daniel ScraggJan 26 · 5 min read

Opinions of a CRTSv2 graduate.

On the 15th of January at 11pm (UTC+2), I took the CRTSv2 exam, and by 1:45am the next day, I had sent my exam report to be graded — that’s 2 hours and 45 minutes. I was quite happy with that, but maybe the exam is just easier than advertised… I boug...

dscragg.com

ArqamSep 16, 2025 · 3 min read

Hack Responsibly: An Intro to Ethical Hacking & Red Teaming

Offensive security is the practice of thinking and acting like an attacker — but with permission. It’s about finding the weak spots an adversary would exploit, then fixing them before anyone with bad intent finds them first. I know some people will s...

arqam.hashnode.dev

Search Hashnode