<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Field Notes — Mrunal Chawda</title><link>https://chawdamrunal.com/blog/</link><description>Security research, open-source projects, and notes on the systems we trust.</description><language>en</language><atom:link href="https://chawdamrunal.com/blog/feed.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-112542: inside the macOS VPN credential-theft path</title><link>https://chawdamrunal.com/blog/articles/apple-pppcontroller/</link><guid isPermaLink="true">https://chawdamrunal.com/blog/articles/apple-pppcontroller/</guid><description>How CVE-2026-112542 exposed macOS PPPController: App Sandbox access, VPN redirection, the stored-credential path, and the evidence behind the blast radius.</description><category>Apple security</category><pubDate>Fri, 30 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Cloudflare, fintech, and the day everything paused</title><link>https://chawdamrunal.medium.com/cloudflare-outage-fintech-payments-when-everything-paused-fa55a7d10ed9</link><guid isPermaLink="true">https://chawdamrunal.medium.com/cloudflare-outage-fintech-payments-when-everything-paused-fa55a7d10ed9</guid><description>A look at the dependencies behind everyday payments.</description><category>Infrastructure</category></item><item><title>I built JWTLens: JWT security testing inside Burp Suite</title><link>https://dev.to/chawdamrunal/i-built-jwtlens-a-burp-suite-extension-to-detect-jwt-security-weaknesses-454l</link><guid isPermaLink="true">https://dev.to/chawdamrunal/i-built-jwtlens-a-burp-suite-extension-to-detect-jwt-security-weaknesses-454l</guid><description>The thinking behind the extension, and the validation gaps it helps explore.</description><category>Building in public</category></item></channel></rss>
