Investigate suspected abuse of a trusted service account at Aurora Retail Group.

Attackers needed no counterfeit website to slip malicious Terraform modules to developers. Unknown intruders gained access to the Cloudflare infrastructure that Coder relies upon. They added their…

An AI model just achieved a perfect score on an exploit-development benchmark — and OpenAI is deliberately restricting what it can do.

1. Executive Summary

Description : Can you take over The Marketplace’s infrastructure?

When someone says “OSINT”, the first thing that comes to mind is searching publicly available sources for information about a person, an…

Security testing is not QA’s responsibility. Period. But when stakeholders expect QA to ensure security, the question is no longer who owns…

Part 6 of 7: Controlled edge-case testing of USB control requests

Part 5 of 7: How proprietary USB control paths become an embedded security attack surface

Vulnerability management in a large enterprise environment is much more than running a scanner and generating a report.

Cross-Site Request Forgery (CSRF) is a web vulnerability that allows an attacker to trick an authenticated user’s browser into sending an…

Speed becomes vital when a manufacturer conceals vulnerability details. Consequently, rapid patching eclipses the need to understand the attack mechanism. MikroTik recently resolved a severe flaw …

Attacks against Magento stores began on September 4, 2026. Security firm Sansec named the flaw StyleSmuggler. This Magento zero-day gives unauthenticated attackers remote code execution, and crimi…

The United States government is prepared to pay up to 10 million dollars for actionable intelligence concerning Amir Yaryab. Yaryab serves as a prominent leader within the cyber structures of Iran…

Three attempts at code execution paid nothing. One template expression that just read a variable paid $1,000.

Some of the most damaging bugs I’ve found didn’t come from exotic payloads or hours of fuzzing — they came from a feature nobody thinks to…