Nitesh Surana
4 articles
-
ResearchIt’s By Design: The Use-After-Free of Azure Cloud
Persistent DNS references to deleted Azure resources create opportunities for attackers to take over trusted endpoints, highlighting a critical risk in cloud infrastructure. TrendAI™ Research discusses six real-world scenarios where attackers could exploit lingering DNS names, allowing them to inherit trust and compromise dependent systems.
April 3rd, 2026 15 minNitesh Surana, Nelson William Gamazo Sanchez
Read article -
ResearchCracking the Isolation: Novel Docker Desktop VM Escape Techniques Under WSL2
TrendAI™ Research has discovered several new methods that enable attackers to escape Docker Desktop's WSL2 VM and run arbitrary code on the host. Our analysis highlights how trusted development tooling can create unexpected attack surfaces when internal APIs and configuration mechanisms are left exposed.
March 12th, 2026 12 minNelson William Gamazo Sanchez , Nitesh Surana
Read article -
ResearchThe Mirage of AI Programming: Hallucinations and Code Integrity
The adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present.
July 25th, 2024 6 minNitesh Surana, Ashish Verma, Deep Patel
Read article -
ResearchObservability Exposed: Exploring Risks in Cloud-Native Metrics
Container Advisor (cAdvisor) is an open-source monitoring tool for containers that is widely used in cloud services. It logs and monitors metrics like network input/output (I/O), disk I/O, and CPU usage. However, misconfigured deployments might inadvertently expose sensitive information, including environment variables such as Prometheus metrics. In this article, we share our findings of the risks we have uncovered and the vulnerable configurations users need to be aware of.
May 2nd, 2024 12 minNitesh Surana
Read article