Giuseppe Toscano
Author

Giuseppe Toscano

28 yo | Ethical Hacker and AI Security Expert

22 articles

Latest

Floci: The Free LocalStack Alternative That Starts in 24ms and It's Better Than What You Lost
Cloud 9 min read

Floci: The Free LocalStack Alternative That Starts in 24ms and It's Better Than What You Lost

LocalStack sunset its free tier in 2026. Floci is the open-source AWS local emulator that filled the gap — 137x faster, MIT-licensed, no auth tokens, and covering services LocalStack never offered for free.

423 Bugs in One Month: How AI Rewrote Firefox Security Forever
Cybersecurity 8 min read

423 Bugs in One Month: How AI Rewrote Firefox Security Forever

In April 2026, Mozilla patched 423 Firefox vulnerabilities — nearly 20× its monthly average. The engine behind it: Anthropic's Claude Mythos Preview, an AI so capable at finding zero-days that Anthropic deemed it too dangerous for public release.

Your Linux Server Has Been Rootable Since 2017 by a 732-Byte Script
Cybersecurity 8 min read

Your Linux Server Has Been Rootable Since 2017 by a 732-Byte Script

Copy Fail (CVE-2026-31431): a 732-byte Python script roots every Linux distro since 2017 through a straight-line kernel crypto flaw. It poisons the page cache to hijack setuid binaries, leaves zero disk traces, and escapes containers. AI-found in 1 hour. 100% reliable. Patch now.

How to Use Claude Code for Free in 2026: Ollama, OpenRouter, and NVIDIA NIM
AI 11 min read

How to Use Claude Code for Free in 2026: Ollama, OpenRouter, and NVIDIA NIM

Paying $100/month for Claude Max just to use Claude Code in your terminal? You don't have to. This guide breaks down every free alternative, from running open-weight models locally on your own machine to tapping NVIDIA's free cloud API, so you can keep the workflow without the bill.

Hyper + Zsh + Powerlevel10k: My 2026 Terminal Stack
OS 6 min read

Hyper + Zsh + Powerlevel10k: My 2026 Terminal Stack

Every tool that makes my terminal faster, smarter, and easier to live in.. packaged into a single install script.

Hacking with Claude: Step-by-step Kali MCP Server Setup for Claude Desktop
Cybersecurity 10 min read

Hacking with Claude: Step-by-step Kali MCP Server Setup for Claude Desktop

What if Claude could run hacking tools for you? This guide shows you how to connect Claude Desktop to a Kali Linux machine and turn a chat interface into a smart AI-powered pentesting companion.

One pip install to Lose Everything: The LiteLLM Supply-Chain Breach
Cybersecurity 10 min read

One pip install to Lose Everything: The LiteLLM Supply-Chain Breach

One pip install was all it took. For three hours on March 24, 2026, malicious versions of LiteLLM sat on PyPI, stealing credentials and backdooring machines. Here's how it happened.

Cloud Hacking: When Clouds Turn Dark
Cybersecurity 7 min read

Cloud Hacking: When Clouds Turn Dark

Millions of companies run on the cloud. Far fewer actually secure it. Here's a look at how attackers get in, from exposed storage buckets to phished employees to misconfigured infrastructure.

Bybit Hack Explained: A Step-by-Step Breakdown for Beginners
Crypto 6 min read

Bybit Hack Explained: A Step-by-Step Breakdown for Beginners

$1.5 billion stolen without breaking a single password. Here's how attackers hijacked a multisig wallet by swapping its logic contract while the owners thought they were signing a routine transaction.

Digital Certificates vs. Passwords
Cybersecurity 3 min read

Digital Certificates vs. Passwords

Passwords get phished, stuffed, and brute-forced. Digital certificates don't. Here's a breakdown of how the two authentication methods compare and when to use each.

Web Application Penetration Testing (WAPT): JWT Vulnerabilities
Cybersecurity 5 min read

Web Application Penetration Testing (WAPT): JWT Vulnerabilities

Hello everyone, in this article we will look at the most common vulnerabilities involving misconfigured JWTs! 🕵️‍♂️🐛 First of all, what

Web Application Penetration Testing (WAPT): Cross-Site Scripting (XSS)
Cybersecurity 4 min read

Web Application Penetration Testing (WAPT): Cross-Site Scripting (XSS)

Hello world, today we will see Cross-Site Scripting (also known as XSS) which is one of the most famous cyber