
Kulkan Newsletter
Kulkan Security is a quality-focused offensive security firm. Subscribe to receive information specific to offensive security as well as select company and team updates.
Archive
Client-Side Path Traversal, Ekoparty Takeaways, and AI-Driven Attack Trends
This month, we break down how Client-Side Path Traversal resurrects CSRF in modern header-based auth environments. Plus, we share our participation as sponsors at Ekoparty 2025 and highlight key offensive security trends emerging from AI-powered systems.
Presenting In4m and a Write-Up on YesWeHack Dojo #43
Our latest updates include a deep dive into a YesWeHack Remote Code Execution challenge and a lightweight tool to stay on top of security news. Plus, Kulkan will be sponsoring Ekoparty 2025; discover key insights on non-human identities, AI risks, and the gap between compliance and proactive security.
New Gitxray Features, GitLab Checklist, and Other Offensive Security Highlights
Our latest updates include Gitxray v1.0.18 with VirusTotal integration, the first version of our GitLab self-hosted security checklist, and recent posts on offensive security. We’re also actively participating in key industry cybersecurity conferences.




