Sequels? Pain? We're obviously talking about Citrix NetScalers, yet again.

Welcome back to another watchTowr Labs blog post - pull up a chair, we always welcome new members to our group therapy sessions.

If you asked a C programmer what they most dislike…

This overview of the basics of Cloud Security includes some tips and resources for getting started in defending the cloud.

Real-world account of how insecure databases and an AI chatbot left customer data exposed and how it could have been prevented.

While hunting for broken link takeover opportunities, I came across an old Google Cloud Storage bucket that was previously used for Helm…

Free Link 🎈

How I earned $12,500 finding GraphQL introspection and batch query vulnerabilities in a fintech startup’s API infrastructure

Based on “Reverse Engineering a WhatsApp 0-Click Vulnerability” by Billy Ellis

How context engineering and AI agents unlock real exploitation — not just recon — in penetration testing, red teaming, and bug bounty…

I was staring at a clean search page on a private bug bounty program. No errors. No leaked data. Just “No results” or a normal page load

Based on “Live bug bounty hunting on Hackerone | Live Recon | part 2" by The Cyberboy

By Shah kaif | “Every leaked API key started as a commit someone thought was private.” | LinkedIn

In March 2026, we ran BugQuest, a 31-day campaign covering everything you need to know about finding and exploiting broken access control vulnerabilities. From understanding the basics of authenticati...

Hello hackers, Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:   Earning $180K via SSRFs Free Burp Suite Pro licenses for top hackers  Bypassing tricky file uplo...

At Intigriti, we host monthly web-based Capture The Flag (CTF) challenges as a way to engage with the security researcher community. This month's challenge, brought forward by Kulindu , presented us...

In an NCSC blog on adapting vulnerability disclosure for AI safeguards, the authors posed questions to researchers. Intigriti observations and response.

Learn how to identify and exploit broken access control vulnerabilities using several different testing methods. Read the article now!

Entenda como a instabilidade geopolítica está impactando a cibersegurança e por que empresas estão priorizando investimentos para reduzir riscos.

Entenda como os agentes de IA estão redefinindo a arquitetura de TI e a segurança, criando sistemas autônomos e a necessidade de governança.

A single email, one Slack message, or even a “wrong number” call — that’s all it takes to bypass million-dollar security systems. Sounds…

Part of the “Hacked by Curiosity” Series

🚀 Mastering Attack Surface Mapping — The Skill That Separates Top Bug Hunters Most bug bounty beginners rely heavily on tools and luck. Top bug hunters don’t. They focus on understanding the …