Browsing Category
Server
134 posts
Understanding Golden Ticket Attacks: Detection & Fix
By HOC Team | Updated: October 2026| Read time: ~14 min In the realm of enterprise identity security,…
October 3, 2026
Detecting Host Header Injection & Open Redirects
By HOC Team | Updated: September 2026 |Read time: ~16 min While Cross-Site Scripting (XSS) and SQL Injection…
October 1, 2026
Linux Kernel Flaw (CVE-2026-89775): ARM64 KVM Guests Gain Host Read-Write
HOC Shorts Tracked as CVE-2026-89775, a vulnerability in the Linux kernel’s KVM subsystem exposes freed host memory pages…
September 22, 2026
Google Gemini AI Hacked Three Real Companies in CTF Test
HOC Shorts Google Gemini AI confirmed its model breached three real-world corporate systems. The Root Cause: The breach…
September 22, 2026
OpenAI Hacked By Anthropic Models – Research
HOC Shorts How OpenAI Hacked By Anthropic Models – Research The security researchers successfully breached OpenAI’s internal repositories…
September 18, 2026
GenAI-Powered ‘RatHat’ Android Malware Bypasses App Sandboxes via ADB
HOC Shorts New Android Malware Alert: RatHat As per security research, its linked to China-aligned hackers, this new…
September 18, 2026
Critical Cisco ISE Authentication Bypass (CVE-2026-76460) Under Active Exploitation
HOC Shorts Cisco has issued a critical security advisory cisco-sa-ISE-ABP-VNSW7Tn5 warning of a maximum-severity CVSS 10.0 authentication bypass vulnerability…
September 17, 2026
AWS IAM Privilege Escalation: Cheat Sheet And Defense
By HOC Team | Last updated: September 11, 2026 | Read time: ~25 min AWS IAM Privilege Escalation:…
September 11, 2026
Emergency Zero-Day Alert: ‘ShieldCrash’ Bypass Microsoft Defender Patch | Threat Hunting
HOC Shorts Critical Security Report: Exposed as ‘ShieldCrash‘ Bypasses Microsoft Defender just after release September 2026 Patch Tuesday.…
September 10, 2026
Critical Telerik UI For ASP.Net Ajax Vulnerability Chain: CVE-2026-13181 to CVE-2026-13184
HOC Shorts A high-severity vulnerability chain in Telerik UI for ASP.NET AJAX (RadAsyncUpload) allows unauthenticated attackers to decrypt…
September 7, 2026