Blog
Unauthenticated API
ServiceNow’s Unauthenticated API Endpoint
A ServiceNow REST endpoint shipped with requires_authentication defaulted to false — and the advisory arrived four days after the patch, gated behind a login wall.
Dev Tooling RCE
Opening a Repository Was the Exploit
A line in .git/config turns the routine git commands an AI coding agent runs at startup into code execution — no prompt, no approval, across seven agents.
Cloud Misconfig
The $270 Million Misconfiguration
The attacker needed no stolen password and no novel exploit — just one configuration mistake most cloud environments still make.