Security Intelligence

Blog.

Análisis y perspectivas sobre seguridad de aplicaciones, análisis estático, taint tracking y el panorama regulatorio de la UE — trazable, como todo en Haikhavan.

WordPress security research responsible disclosure

80 days of silence after my WordPress security report

A documented August–October 2026 WordPress disclosure timeline, the security team’s one reply, a harmless one-click XSS proof, and a request for triage and fair attribution.

·8 min de lectura·Aria Akhavan
AI Security Anthropic Claude

Potential Claude Safeguard Bypass: No Reply from Anthropic

I reported a potentially severe Claude cybersecurity safeguard bypass to Anthropic, backed by 700+ chat logs. Two emails later, no acknowledgment.

·8 min de lectura·Haikhavan Security
Responsible Disclosure Vulnerability Research Zero-Day

Why We Publish Unpatched Vulnerabilities

Why we publish vulnerabilities after a responsible disclosure process even when no patch is available — and why transparency and weaponization are not the same thing.

·8 min de lectura·Haikhavan Security