🧩 From Padding Oracle to Shell: Unauthenticated RCE in Telerik UI for ASP.NET AJAX • 🔥 Out of Bounds, Out of Sandbox: RCE in Go JavaScript Engine • 🏭 Countering misuse of AI: September 2026 / Anthropic
JSON Web Tokens (JWTs) are everywhere in modern authentication, and for good reason: they are compact, self-contained and easy to pass ...
❄️ When it Snows it Pours - Anatomy of a ServiceNow Red Team - MDSec • 🪤 Breaking Claude Code Opus 5 Auto Mode • ⛓️💥 Compromising Cleo Harmony: A SAML Bypass Chain to Arbitrary Code Execution
Artificial intelligence has prompted a question our industry should have asked long ago: what is the moat in pentesting? For years, ...
💎 Ruby Marshal Kick-off Gadgets - elttam • ␛ VMs won't contain cyber-capable agents - The Trail of Bits Blog • ☕️ Escaping Google Cloud Application Integration Sandbox: Straight into Borg
🤖 Patterns and problems in multiagent systems \ Anthropic • ⚒️ Staying Ahead of Adversarial AI Through Agentic Source Code Review | Google Cloud Blog • 💸 We burned 11.7bn tokens to find the best cyber AI model | GLM5.3 and DeepSeek are now frontier
🏭 visa/visa-vulnerability-agentic-harness: Visa Vulnerability Agentic Harness • 🔀 LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection • 💎 Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam
✅ AI Guardrails That Prove, Not Guess • 🧠 GitHub - Kritt-ai/open-kritt: Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code. · GitHub • 🐚 Cruising for Shells in Flowise - elttam
Security Assertion Markup Language (SAML) is a widely deployed standard for Single Sign-On (SSO) in the enterprise, and a recurring source ...
🪲 CVE-2026–44722: A Zip encryption downgrade caused by an incorrect operator • 🪲 Finding six NGINX vulnerabilities with open models • 🤗 Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident
Every few weeks, another startup announces an AI pentester. Looking at the market, it feels as though the future of AI ...
⚒️ ethiack / ethibench • ⚒️ capitalone / VulnHunter • 🪲 FastJson 1.2.83 Remote Code Execution
After the Allies broke Enigma during the Second World War, they faced an unusual problem. The difficult part was no longer ...