CAPTCHA was designed to separate humans from bots by finding tasks humans could do and machines couldn't. That gap closed completely around 2023 — I track this because it has direct implications for every application that uses CAPTCHA as its sole bot defence. Modern AI vision models solve image CAPTCHAs faster and more accurately than humans. Audio CAPTCHAs fall to speech recognition in seconds. reCAPTCHA v3's behavioural scoring is being gamed by mouse movement simulators trained on real human behaviour…
Saturday, May 2, 2026
AI Model Theft — Extraction Attacks 2026 — Stealing Trained Models Through the API
Every query you send to a commercial AI API teaches an attacker about the model's decision boundaries. I've seen this explained in briefings for years — the math on why it's a serious threat is undeniable. Send enough of them — crafted specifically to probe those boundaries — and you can reconstruct a functional clone of the model without ever touching the weights. That's model extraction: intellectual property theft through the API the owner gave you access to. The model…
2026 LLM Jailbreak Landscape
The 2026 LLM Jailbreak Landscape — A Working Pentester's Synthesis of Public Research By Lokesh Singh (Mr Elite) — Founder, Securityelites.com Published: May 2, 2026 URL: /research/2026-llm-jailbreak-landscape/ Category: AI in Hacking → LLM Hacking Reading time: ~14 minutes This is a working pentester's read of the public LLM jailbreak research published between January 2024 and April 2026 — what's actually happening in the field, drawn from cited papers and disclosed incidents, not from anyone's marketing deck. The five things that…
How Hackers Use Social Engineering in 2026 — 7 Manipulation Techniques That Actually Work
How hackers use social engineering in 2026 :— Technology gets patched. People don't. Every firewall, intrusion detection system, and endpoint protection platform becomes irrelevant when a hacker calls the help desk pretending to be a stressed executive locked out of their account. Or sends a perfectly crafted email using AI to replicate a colleague's writing style. Or simply walks through a tailgated door wearing a high-vis vest and carrying a ladder. Social engineering is the attack that bypasses every technical…
Prompt Injection in RAG Systems 2026 — How Attackers Poison AI Knowledge Bases
The standard prompt injection defences I review — input validation, output filtering, jailbreak detection — all look at the user's message. RAG attacks walk right past them. The attacker never sends the injection through the user input channel at all. They upload a PDF to the shared knowledge base. They submit a support ticket whose content gets indexed. They edit a public wiki page that the enterprise RAG system crawls weekly. Three weeks later, when a legitimate user asks a…
Friday, May 1, 2026
LLM02 Sensitive Information Disclosure — How LLMs Leak PII, Credentials & System Data | AI LLM Hacking Course Day 6
🤖 AI/LLM HACKING COURSE FREE Part of the AI/LLM Hacking Course — 90 Days Day 6 of 90 · 6.6% complete ⚠️ Authorised Targets Only: Testing for sensitive information disclosure in LLM applications must only be performed against systems you have explicit written authorisation to test. If you discover real credentials, PII, or sensitive data during authorised testing, document it without accessing or using the disclosed information beyond what is necessary to confirm the finding. SecurityElites.com accepts no liability for…
AI Password Cracking 2026 — How Machine Learning Breaks Credentials Faster
The 2023 Home Security Heroes study ran PassGAN against a database of 15.6 million passwords. The results: 51% cracked in under a minute. 65% cracked in under an hour. 81% cracked within a month. PassGAN isn't a traditional dictionary attack — it's a generative adversarial network trained on real leaked passwords that generates novel guesses matching the statistical distribution of how humans actually choose passwords. Those numbers don't mean 81% of all passwords are crackable. They mean 81% of the…
Subscribe to:
Posts (Atom)