In my previous article, I published a story about how losing $500 unexpectedly led me back to a Web Cache Poisoning vulnerability that I…

A few weeks ago I was poking around CTF platform. What I found was a pretty embarrassing vulnerability: any registered user could give…

Intigriti won Best Security Company (under 250 employees) at the 2026 SC Awards Europe.  

The Future of AI-Powered Web Application Security Testing

Abstract

Mapping out a target, like a detective board

Why Consistency Beats Talent in Cybersecurity, Blockchain Security, and Smart Contract Auditing

A cloud security case study exploring public storage exposure, impact validation, and the difference between an exposed resource and a…

Over the past two months I’ve been building out and testing a vulnerability hunting framework for the WordPress ecosystem. I want to be…

Skip the generic advice. Here’s what actually moves the needle.

Series: Web3 Security Zero se Advance 🛡️ | Article #14 By HackerMD | 25 min read

AI is cumbersome to test, LLM applications can accept any input and produce any output, each response id probabilistic and the number of…

Executive Summary

මේ module එකේ focus එක තමයි AI products වල AppSec.

An analysis of a Boolean-Based Blind SQL Injection vulnerability discovered in a sensitive government web application and responsibly…

None of them looked critical on their own. Chained together, they handed over the entire platform — without the victim clicking a thing.

When I wrote about Spec-Driven Development in November 2025, I left one critical question unanswered: where does security fit?

Introduction: The Comfortable Lie

Can AI meaningfully assist in security testing, or is it just hype? In this post, I walk through a concrete example: using Claude Code to…

Before discussing CORS misconfigurations, it is important to understand what CORS is and why it exists.