A Tale of Several Hijacks and What It Taught Me About Runtime-Driven Testing

What do the Windows versions of Ghostscript, Apache, PHP, GnuPG, wget, and Microsoft Coreutils have in common?
If you fancy reading a story about simple cross-user execution/local privilege escalation vulnerabilities (including CVE-2026-19547, CVE-2026-89281, CVE-2026-94574) and with an interesting moral, here's my latest article: https://atos.net/wp-content/uploads/2026/09/Cybershield-hijacks-article.pdf.