Scripts and Coding

VBScript, Python, Shell Scripting, Bash, Bash script, shell script, API Scripting, YAML, JSON, XML, Regex, cron, scripting basics, script templates, script security, REST API, webhook, coding tutorial, Go, Golang, Rust, Ruby, Perl, batch script, batch file, .sh, automation script

42 stories

Cloud Computing

Ruby, GitLab and the Onigmo Flaw: What You Need to Know Now

Ruby shipped emergency patches this week after three bugs in Onigmo, the language’s regular expression engine, were found to underlie four critical GitLab remote code execution (RCE) vulnerabilities. The issues let specially crafted patterns corrupt memory during regex compilation, and because GitLab compiles user-supplied patterns in some features, the result was severe: multiple high-severity CVEs, including unauthenticated 10.0-rated flaws. This post explains what happened, who’s at risk, and the practical…

Saugata DattaOct 24, 20264 min read73

Cybersecurity

Microsoft Patches Windows Shell Zero-Day (CVE-2026-96951) Exploited to Bypass Mark of the Web

Microsoft released an urgent patch in the October 2026 Patch Tuesday cycle to address an actively exploited Windows Shell zero-day that allows attackers to bypass Mark of the Web (MOTW) protections. Tracked as CVE-2026-96951 and rated Important with a CVSS score of 8.8, Microsoft confirmed exploitation had already occurred when the update shipped. The vendor’s “Exploitation Detected” assessment raises this from a theoretical risk to an immediate operational concern for…

Saugata DattaOct 14, 20264 min read123

DevOps and Infrastructure

Smuggling Code: How ClickFix Uses Browser Cache to Beat Windows Run Limits

ClickFix attacks have evolved from simple social-engineering lures into highly creative delivery mechanisms that turn a user's own system into the execution environment. Recent Microsoft telemetry describes a variant that stages malicious scripts inside a victim's browser cache—disguised as innocuous PNG files—and then convinces the user to paste a short command that triggers execution of that cached payload. By hiding the payload in cache entries and later reconstituting it on…

Saugata DattaOct 6, 20264 min read148

AWS

Amazon Drops NDAs as Data Center Backlash Grows

Amazon’s recent move to stop using nondisclosure agreements (NDAs) with government agencies marks a tactical shift in a widening dispute over the role of large data centers in local communities. Announced by AWS CEO Matt Garman in a blog post, the change comes as cities and states across the U.S. consider moratoriums and tougher scrutiny of new facilities. The announcement is short but strategic: Amazon is trying to blunt a…

Saugata DattaOct 4, 20264 min read228

Artificial Intelligence

OpenAI’s ‘Trusted Contact’ for ChatGPT: A New Safeguard for Users at Risk

On May 7, 2026, OpenAI unveiled a feature called Trusted Contact for ChatGPT accounts, designed to surface a human connection when conversations indicate possible self-harm. The tool lets adult users designate a trusted person — a friend or family member — who will be encouraged to check in if the system detects signs of distress. OpenAI says the aim is to provide an immediate, human-facing nudge alongside its existing automated…

Saugata DattaMay 8, 20263 min read214

Automation

The Credential-Free Watchdog: Mastering Event-Driven App Automation

We have all been there. You are an automation lover. You have built a masterpiece — a Scheduled Task, perfectly configured, credentials entered, running like clockwork. You walk away like a hero. Then Monday morning hits. Your account is locked. Your coffee tastes like failure. I once left a mapped network drive in an SOE test build and completely forgot about it. Windows did not forget. Every night it faithfully…

Saugata DattaMay 7, 202612 min read250

PowerShell

Ditching PsExec – Running Interactive SYSTEM Shells Natively in PowerShell

If you’ve spent any time in Windows System Administration over the last decade, I can almost guarantee you’ve reached for PsExec at least once. Originally from Sysinternals and now officially part of Microsoft, PsExec is one of those deceptively simple tools that has quietly saved thousands of IT professionals from hours of sheer agony. A single executable, zero installation, no messy dependencies. You drop it on a machine, and it…

Saugata DattaMay 2, 202617 min read388

Artificial Intelligence

OpenAI’s GPT-5.4-Cyber: a practical boost for defenders — and a new risk calculus

OpenAI has introduced GPT-5.4-Cyber, a purpose-built variant of GPT-5.4 tuned to assist vetted security professionals with tasks previously reserved for specialized analysts. Rather than a general consumer release, this model is designed to lower refusal rates for legitimate cybersecurity workflows: binary reverse engineering, vulnerability scanning, malware analysis and exploit research. The announcement frames the model as a defensive accelerant — a tool to help defenders inspect compiled software and evaluate…

Saugata DattaApr 15, 20264 min read362

Cybersecurity

Micropatches for Windows Shell Bypass (CVE-2026-21510): What 0patch Fixed and Why It Matters

Microsoft released fixes earlier this year for CVE-2026-21510, a security feature bypass in Windows Explorer that let specially crafted shortcut (LNK) files execute a remotely hosted DLL without the usual security warning. Researchers observed exploitation in the wild and uploaded a sample to malware repositories, enabling vendors and defenders to reproduce the issue and protect legacy systems that no longer receive timely official updates. This post explains how the vulnerability…

Saugata DattaApr 14, 20264 min read406

AI Agents and Frameworks

Building an AI Coding Tool Stack for Modern Development

The past few years have quietly transformed how software is written. AI-assisted tools are no longer experimental add-ons; they're becoming integral parts of developer workflows. But picking the right combination of models, integrations, and guardrails is more art than science. This article walks through a pragmatic approach to assembling an AI coding tool stack that improves productivity without sacrificing code quality, security, or team cohesion. Why an AI coding stack…

Saugata DattaApr 13, 20264 min read538

Automation

What’s New in Microsoft Defender: AI Triage, Predictive Hardening, and Call Monitoring — What IT Teams Should Know

Microsoft used RSA 2026 to roll out a wave of Defender enhancements that are already changing how security teams detect, investigate, and respond to risk. The announcements bundle intuitive UX changes—like a consolidated identity dashboard—with more consequential shifts: AI-driven triage and automated hardening that can act proactively on predicted attacker movement. These features promise speed and scale, but they also introduce operational and governance questions that every security leader should…

Saugata DattaMar 28, 20265 min read420

Artificial Intelligence

Automate Your Claude Code Workflow: A Practical Guide to Scheduled Tasks

A little automation goes a long way. If you spend any time monitoring deployments, babysitting long-running builds, checking back on pull requests, or simply reminding yourself to follow up on something later, Claude Code’s scheduled tasks give you a lightweight, session-scoped way to run prompts on a cadence. They let Claude re-run prompts automatically while your session is open, turning repetitive checks into background chores so you can focus on…

Saugata DattaMar 21, 20266 min read638

Free Tools: IP, DNS, SSL