Field Notes// 05
Research · Analysis · Opinions
Long-form breakdowns on threats, tools, and the intersection of security and AI. Written by Shubham Mane.
Analysis2026-06-17
CVE-2026-20253: Reading the Advisory Before You Panic
A field method for triaging a fresh Cisco CVE in the 2026-20xxx block — and the detection logic that holds up regardless of which version table the PSIRT publishes.
Shubham Mane·8 min readAnalysis2026-06-07
Gamaredon's WinRAR Exploit: What Defenders Actually Need to Do
Russia's most active APT is weaponising a patched WinRAR flaw — here's the real-world detection and response playbook.
Shubham Mane·7 min readAnalysis2026-06-07
21 FFmpeg Zero-Days, 429 Chrome Bugs: The AI Bug-Hunting Era Arrived
An AI agent just strip-mined FFmpeg's parser surface and Chrome shipped a record patch year. If you transcode untrusted media, your threat model changed this quarter.
Shubham Mane·9 min read