Posted inAdvisory
Binance Hack 2026: Fake Job Interview Lessons for Startups
Binance's own account of its Oct 2026 theft: interview malware, an internal AI tool pivot, a deploy token, EIP-7702. What startups should test.
Posted inAdvisory
Does SOC 2 Require a Penetration Test? What the Criteria Actually Say
Does SOC 2 require a penetration test? Not by name. See what the criteria say, how PCI DSS 11.4 and HIPAA differ, and how to scope one test that fits.
Posted inAdvisory
Critical Alert: React Server Components RCE (CVE-2025-55182)
The React team just dropped a massive security update regarding a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). Officially tracked as CVE-2025-55182 (and currently hitting the…