Hidden Investigations

Giphy animation

Research. Exploit. Defend. Repeat.

We don’t guess — we investigate.

Cracking the "Small" Exponent — A Full Write-Up of “Exponope” (THCON 2026)

Can AI Agents Autonomously Hack Websites, Find Vulnerabilities, and Exploit Zero-Day Bugs?

Remote Code Execution in Ghost CMS (CVE-2026-29053): When a Theme Becomes a Server-Side Execution Primitive

MongoBleed (CVE-2025-14847): When MongoDB Compression Leaks Memory

January 10, 2026

Shai-Hulud v2 “Second Coming”: Inside the npm Supply Chain Worm

December 3, 2025

Django CVE-2025-64459: Critical SQL Injection in the ORM Explained

November 20, 2025