Research Archive

Persistence

Browse entries by research type, time, topic, and threat domain. This page behaves more like an archive than a feed.

2026

On a near-black teal-blue background, a stream of commands pierces the localhost boundary from a remote web origin into a local terminal panel; nearby, a memory directory is being inscribed with malicious instructions that hijack an AI silhouette's decision-making; a hidden WebSocket tether silently siphons terminal output; in the foreground a checkpoint guard inspects a forged badge — copper-orange accents throughout, symbolizing the ptyctl test server's zero-auth CORS and cross-origin RCE chain

Security Research

0day Hunting the Day After xAI Open-Sourced grok-build (Part 4): ptyctl Test Server's Zero-Auth CORS and Cross-Origin RCE

0day (4) I found the day after xAI open-sourced grok-build.

2026-07-20 6 min #AI Security