ARTICLES
Operator notes on identity, cloud, exploit chains, and tooling. Written for people who break things that matter.
Your Password Wasn't Hacked Everywhere — It Was Reused
Most account takeovers are not elite zero-days. They are credential stuffing — one leak, one reused password, many hijacked services. Here is why unique passwords matter, and how REHNOVA Passfill keeps generation and storage local on your machine.
From Logic Bugs to RCE
Why the best findings are rarely "buffer overflow in 2026" — and how authorization logic, SSRF, and deserialization still become full compromise.
Cloud IAM Assumption Chains
How small IAM misconfigurations become tenant-wide impact — role assumption, federation, and why "least privilege" often is not.
Kerberos Delegation Paths That Still Work
Unconstrained, constrained, and resource-based constrained delegation — how operators still chain identity paths when the domain looks "hardened."
