Velstadt Blog

Cybersecurity Insights

Research, threat trends, and practical guidance from our cybersecurity team.

Account takeover caused by an authentication bypass, illustrated by an attacker escaping with user data from a compromised account.
August 13, 2026 • 9 min read

Universal OTP to 0-Click Account Takeover: How a Static Verification Code Bypassed Authentication

Attack Surface Offensive Security Red Teaming
Minimal dark-blue illustration of remote code execution, showing a remote attacker using a laptop to interact with a distant server infrastructure through data streams.
July 10, 2026 • 13 min read

From Exposed elFinder to Remote Code Execution: How an Unauthenticated File Manager Led to Server Compromise

Attack Surface Offensive Security Red Teaming
Security misconfiguration leading to path traversal and unauthorized local file access in exposed services
July 1, 2026 • 11 min read

Exposed WSO2 SOAP Services and Path Traversal: How a File Management Endpoint Led to Unauthenticated Local File Read

Attack Surface Offensive Security Red Teaming