Writing about cybersecurity, tech and whatever else I find interesting.
Google has patched CVE-2026-2441, a critical Chrome zero-day that was actively exploited in the wild. This post walks through how the vulnerability works, how exploitation chains are built, and what this incident tells us about browser security in real-world environments.
AI agent skills defined in SKILL.md files introduce a new supply chain attack surface. This article explains how prompt injection, malicious skill uploads, and registry abuse can turn simple markdown into an execution vector.
Clawdbot AI agents claim to automate tasks across local systems and cloud environments. This article analyses how agent-based AI tools operate, the cybersecurity risks they introduce, and why installing unverified agents can expose users to serious compromise.