Home / Research
The Ghost Wire
AI attack research, fast CVE breakdowns and field notes from active engagements.
> CVE-2026-109618
Vulnerability Research
PHP2Shell: What Pentesters and Defenders Need to Know About CVE-2026-109618 and CVE-2026-109619
> torch.load(untrusted)
AI & Agentic Security
Your Model File Is Executable Code
> LLM06 excessive agency
AI & Agentic Security
Ghosts in the Machine: Your AI Is an Insider — and Attackers Know It
> AML.T0051
AI & Agentic Security
Beyond Human Hackers: State-Sponsored AI in the Shadows
> source code exposed
Vulnerability Research
F5 BIG-IP Breach: Why Attackers Now Have Your Blueprint
> CVE-2025-6554
Vulnerability Research
Inside the Wire: Chrome Zero-Day CVE-2025-6554 Exploited in the Wild
> http://169.254.169.254
Web & API
Chasing the Ghost in the Machine: Mastering SSRF
> shell.php.jpg
Web & API
File Upload Vulnerabilities: The Silent Breach Vector Hiding in Plain Sight
> ' or '1'='1
Web & API
XPath Injection: A Tactical Guide
> objective: crown jewels
Red Team
Beyond the Penetration Test: What Is a Red Team Engagement and Why Do You Need It?
> pentest != red team
Red Team
Find the Flaw or Fight the Threat: Decoding Pentesting vs. Red Teaming
> §164.308(a)(8)
Compliance