Welcome to my corner of the internet where I explore the intersection of cybersecurity and artificial intelligence. Red teaming, enterprise defense, threat hunting, it's all one big game of Chess where I'm trying to think like both sides.https://blog.own.sh/https://blog.own.sh/blog/2025-11-15-attack-window-compression-how-ai-is-reducing-time-to-impact-in-modern-cyberattacks/https://blog.own.sh/blog/2025-11-15-attack-window-compression-how-ai-is-reducing-time-to-impact-in-modern-cyberattacks/As adversaries begin to automate more of their operations with AI, defenders will need to leverage the same technology in new creative ways. We must be more proactive at finding and fixing vulnerabilities, while also enabling faster response times. We must also be mindful of our own use of AI, and ensure that we are not creating new problems for ourselves.Sat, 15 Nov 2025 08:00:00 GMThttps://blog.own.sh/blog/2025-9-4-cve-2025-9074-when-docker-desktops-internal-api-goes-rogue/https://blog.own.sh/blog/2025-9-4-cve-2025-9074-when-docker-desktops-internal-api-goes-rogue/A critical container escape vulnerability in Docker Desktop allows any running container to access the Docker Engine API without authentication, potentially leading to full host compromise.Fri, 05 Sep 2025 07:00:00 GMThttps://blog.own.sh/blog/2025-8-15-badsuccessor-unveiled-cve-2025-53779-deep-dive-into-windows-server-2025s-dmsa-privilege-escalation/https://blog.own.sh/blog/2025-8-15-badsuccessor-unveiled-cve-2025-53779-deep-dive-into-windows-server-2025s-dmsa-privilege-escalation/Comprehensive technical analysis of CVE-2025-53779 (BadSuccessor), a critical Windows Kerberos vulnerability that allows domain-wide privilege escalation through delegated Managed Service Account abuseSat, 16 Aug 2025 07:00:00 GMT