Simulating the ultimate adversary
to build unshakeable
enterprise security.
Bridging deep offensive vulnerability discovery with real-world experience building and leading tier-1 bank SOCs.
- RESEARCH
- ACTIVE
- DISCLOSURES
- 20
- CVEs
- 14
- LAST UPDATE
- 21 SEP 2026
Recent Discoveries
View all CVEs| ID | Product | Type | CVSS | Severity | Discovered |
|---|---|---|---|---|---|
| CVE-2026-82042 | UTMStack | Authentication Bypass | 9.8 | CRITICAL | 21 Sep 2026 |
| CVE-2026-82041 | UTMStack | WebSocket RCE | 9.8 | CRITICAL | 18 Sep 2026 |
| CVE-2026-77915 | rConfig Core | Admin Registration | 9.3 | CRITICAL | 16 Sep 2026 |
| CVE-2026-80138 | ClipBucket V5 | Command Injection | 9.2 | CRITICAL | 12 Sep 2026 |
| CVE-2026-77929 | ClipBucket V5 | Upload RCE | 8.8 | CRITICAL | 08 Sep 2026 |
Expertise
PENETRATION TESTING
Internal, external, and Active Directory assessments
Phishing simulations for human security awareness
APPLICATION SECURITY
Web, mobile, and API security assessments
Application logic, authentication, and data handling
CODE REVIEW
SAST with SonarQube, Checkmarx, Semgrep
Manual review augmented with LLM agents
CLOUD SECURITY
AWS, Azure, and GCP configuration reviews
Cloud pentesting and architecture assessment
ADVERSARY SIMULATION
Adversary emulation and ransomware simulation
Testing detection and response capabilities
SECURITY OPERATIONS
SIEM, XDR, PAM, and NTA deployment
Building and leading SOC capabilities
Latest CVE Writeups
View all CVEsCVE-2026-82039: SQL Injection in UTMStack Asset Groups Search
CVE-2026-77929: From Image Upload to Remote Code Execution in ClipBucket V5
CVE-2026-77928: Blind SQL Injection in ClipBucket V5 Private Message Deletion
CVE-2026-77927: Blind SQL Injection in ClipBucket V5 Photo Deletion
CVE-2026-86751: Snipe-IT Arbitrary File Read and SSRF via Acceptance Note Injection
Adam Nurudini
My career has been defined by a "full-spectrum" perspective on security. I've sat on both sides of the fence — building and leading a National Bank's SOC from the ground up, and now operating as an Offensive Security Consultant at Sekuro, where I simulate the adversary to protect Australia's most critical enterprises.
Learn more