AppleScript Injection and Directory Traversal — Security Bugs I Fixed in My Own

<blockquote> <p><strong>Disclaimer:</strong> This article describes a security research activity carried out in a <strong>controlled context</strong>, with educational goals and

<h2> What I built </h2> <p>For Hacktoberfest 2026 Week 2's <strong>Side Hustle</strong> challenge, I built <a href="https://github.com/kushal-pandey/securelocal-ai" rel="noopener

<p><em>All tests run on an 8-year-old MacBook Air.</em></p> <p>Drawing a black rectangle over text is not redaction.</p> <p>The text is still there. Select all, copy, paste into

<p>There's a class of prompt injection attack that bypasses almost every AI firewall on the market — and it's sitting in the blind spot of your agentic stack right now.</p>

<p>Last week, Apple removed "Anything" from the App Store. The startup had raised $11M at a $100M valuation. Gone overnight.</p> <p>Replit and Vibecode are also blocked from

<p>Recently, mentions of Mythos from Anthropic leaked online - a model that found vulnerabilities even in OpenBSD. We thought this was a great moment to share our own developments

<p>Hey. I am Aniruddha Adak. </p> <p>A final year computer science student coding from a hostel room in West Bengal. </p> <p>Two years ago, I was staring at a blank terminal. I

<p>Why Your Supabase Data Is Exposed (And You Don’t Know It)</p> <p><em>The four RLS mistakes that silently leak production data — and how to verify your policies actually