🤖 AI threats in the wild: The current state of prompt injections on the web • 🪟 Persistence Atlas: 19 Techniques Nobody Talks About • 😳 Securing GitHub: Wiz Research uncovers RCE in GitHub.com
📆 The zero-days are numbered • 🔁 High-Quality Chaos • 🪡 Needle in the haystack: LLMs for vulnerability research
Back when I worked in appsec, I wrote the same tool twice for two different companies. Both times it was a ...
🤖 Lessons Learned From RITSEC CTF • 😼 Fail Open, Game Over: Turning a One-Line Tomcat Fix into Unauthenticated RCE • 🤖 I Let Claude Opus Write a Chrome Exploit
👾 GDDRHammer and GeForge: GPU Rowhammer Now Achieves Full System Compromise • 🤖 Assessing Claude Mythos Preview’s cybersecurity capabilities
✨ ImageMagick: From Arbitrary File Read to File Write In Every Policy • 🧑🏻💻 Leveling Up Secure Code Reviews with Claude Code • 🤖 Vulnerability Research Is Cooked
Everyone is panicking about AI-generated zero days. They should be paying attention to the other side of the equation. Anthropic recently ...
☁️ Remote Command Execution in Google Cloud with Single Directory Deletion
🤖 Testing AI for Vulnerability Research: 4 Approaches & Where I Failed • 🛠️ Hyoketsu – Solving the Vendor Dependency Problem in RE • 🐧 Sashiko
As part of our CVE monitoring, we came across GHSA-pcq9-mq6m-mvmp (CVE-2025-68402), an authentication bypass in FreshRSS, a self-hosted RSS aggregator. It ...
🔒 IronCurtain: A Personal AI Assistant Built Secure from the Ground Up • 🚥 mitmproxy for fun and profit: Interception and Analysis of Application Traffic • ⛓️💥 Authentication Bypass in pac4j
💻 Browser-Based Port Scanning in the Age of LNA • 🪟 100+ Kernel Bugs in 30 Days • ⛈️ vinext: Vibe-Hacking Cloudflare's Vibe-Coded Next.js Replacement
More and more, with the progress of coding agents, people are rewriting software.And honestly, it looks easy. You write a good ...