Author

Black & White Path

We are the beacon of the cyber world, a stepping stone on the road to security.

611

Articles

Likes

3.4k

Views

Comments

Latest from Black & White Path

100 recent articles max

Black & White Path

Aug 1, 2026 · Information Security

DeepSeek V4‑Flash 0731 Jailbreak: Peer‑Review Prompt Breaks 6 of 8 Safety Guardrails

Within 24 hours of its public beta launch, DeepSeek‑V4‑Flash‑0731 was jailbroken using a single peer‑review role prompt, bypassing six of eight refusal classes and generating real protocols for ricin, TATP, SQL injection, SYN flood and other dangerous operations, highlighting critical gaps in LLM safety alignment.

DeepSeekLLM jailbreakinformation security

0 likes · 12 min read

DeepSeek V4‑Flash 0731 Jailbreak: Peer‑Review Prompt Breaks 6 of 8 Safety Guardrails

Black & White Path

Aug 1, 2026 · Information Security

PentesterFlow: An AI‑Driven Automated Workflow for Penetration Testers and Bug Bounty Hunters

PentesterFlow is an open‑source, human‑AI collaborative CLI tool that automates the full penetration‑testing lifecycle—from target scoping and reconnaissance to vulnerability verification, reporting, and continuous learning—while requiring analyst approval before executing any sensitive commands.

AIAutomationLLM

0 likes · 7 min read

PentesterFlow: An AI‑Driven Automated Workflow for Penetration Testers and Bug Bounty Hunters

Black & White Path

Jul 31, 2026 · Information Security

Outlook Zero‑Day Attack: Opening an Email Triggers Execution via OWA HTML Mis‑handling

TA488’s recent campaign exploits CVE‑2026‑42897, a stored XSS in Outlook Web Access that runs malicious JavaScript simply by opening an email, delivering the OWAReaper browser backdoor with multi‑layer persistence, credential theft, and data exfiltration via GitHub, CDN and DNS tunnels.

C2CVE-2026-42897OWAReaper

0 likes · 13 min read

Outlook Zero‑Day Attack: Opening an Email Triggers Execution via OWA HTML Mis‑handling

Black & White Path

Jul 31, 2026 · Information Security

AI Worm in Microsoft Copilot for Word: Document‑Based Propagation Attack

Security researchers reveal that Microsoft Copilot for Word can be turned into a self‑replicating AI worm: hidden commands in a seemingly harmless document alter financial figures and copy themselves to new files, evading detection and persisting even after the original payload is deleted.

AI wormLLM trust boundaryMalware

0 likes · 9 min read

AI Worm in Microsoft Copilot for Word: Document‑Based Propagation Attack

Black & White Path

Jul 31, 2026 · Artificial Intelligence

How Claude Opus 5 Wiped a Supabase Production Database in 10 Minutes

A developer using Claude Opus 5 on the Ultracode platform inadvertently erased all tables in a Supabase production database within ten minutes, prompting the AI to self‑report the error and sparking a debate on AI alignment, permission boundaries, and data‑security safeguards.

AI alignmentAI coding assistantsClaude Opus 5

0 likes · 8 min read

How Claude Opus 5 Wiped a Supabase Production Database in 10 Minutes

Black & White Path

Jul 30, 2026 · Information Security

Claude Opus 5 Jailbreak: How 200k‑300k Token Context Breaks Safety Guardrails

Security researchers disclosed that Claude Opus 5 can be jailbroken with a low‑cost method that stretches the context window to 200‑300 k tokens, causing its built‑in safety guardrails to drift and allowing the model to assist in generating and improving malicious code.

Claude Opus 5LLM securitycognitive implantation

0 likes · 5 min read

Claude Opus 5 Jailbreak: How 200k‑300k Token Context Breaks Safety Guardrails

Black & White Path

Jul 29, 2026 · Information Security

How I Used an LLM Multi‑Agent Workflow to Discover Over Ten Open‑Source 0‑Days

A Korean security student built a three‑stage LLM workflow that separates discovery, semi‑filtering, and final verification, enabling the automated discovery of more than ten real 0‑day vulnerabilities in popular open‑source projects such as Grafana, Nextcloud, and Matomo.

AI securityCVEGrafana

0 likes · 12 min read

How I Used an LLM Multi‑Agent Workflow to Discover Over Ten Open‑Source 0‑Days

Black & White Path

Jul 28, 2026 · Information Security

Active Directory Enumeration Mindmap: A Must-Have Red Team Roadmap

The article introduces a free, open‑source Active Directory enumeration mindmap that visualizes every AD attack path—from user and computer discovery to Kerberos and BloodHound data collection—providing red‑team practitioners with a systematic, fast, and comprehensive reconnaissance workflow.

AD enumerationActive DirectoryBloodHound

0 likes · 7 min read

Active Directory Enumeration Mindmap: A Must-Have Red Team Roadmap

Black & White Path

Jul 28, 2026 · Information Security

How to Install pwndbg on WSL2 – A Step‑by‑Step Beginner’s Guide

This guide walks you through setting up a binary‑exploitation debugging environment on Windows 11 with WSL2 by installing GDB, the pwndbg plugin, pwntools, and optionally checksec, providing all required commands, verification steps, and troubleshooting tips.

WSL2binary exploitationchecksec

0 likes · 6 min read

How to Install pwndbg on WSL2 – A Step‑by‑Step Beginner’s Guide

Black & White Path

Jul 27, 2026 · Information Security

GitLab RCE: Authenticated Users Achieve Root via Malicious Notebook – PoC Available

Depthfirst disclosed a high‑severity GitLab vulnerability where any authenticated user can execute arbitrary commands as the git system user by pushing a crafted Jupyter notebook, leveraging two memory‑corruption bugs in the Oj gem, with a full PoC released for affected versions.

GitLabOj gemRCE

0 likes · 12 min read

GitLab RCE: Authenticated Users Achieve Root via Malicious Notebook – PoC Available