Anthropic recently published a blogpost detailing how their latest model, Claude Opus 4.6, discovered over 500 zero-day vulnerabilities in open-source software. The news was quickly picked up by outlets like Golem, but I can’t help but feel a sense of déjà vu. This reminds me of headlines from …

At my current job, I am consulting customers regarding various security topics. Naturally, GenAI comes up a lot these days, so I did a deep dive into AppSec for GenAI applications. As a result I also wrote to blog posts (in german though) on the topic. Enjoy.

• KI in Offensive …

In 2014 some infosec interested students at TU Graz started playing CTFs under the name LosFuzzys. In the last year, thanks to stefan and a couple of other very motivated guys, we managed to get more people interested and the whole thing going. Checkout our site for write-ups and more …

OK I have to confess I solved this challenge by pure luck. The setting was that there is a service that allows you to register and the upload files. The uploaded files can be shared by creating a link, which contains a HMAC over the user and the filename. If …

This was a fun challenge :) The setting was that the royal bank of Fluxembourg was hacked by Killy the Bit and now they set up a page to reset the user passwords. Because Killy owes us a favor we received the source code for the password resetting page. So the …