⤷ Title: AI Agents Have a Token Problem: When Valid Access Becomes Dangerous
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 16:45:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ai #agents #information_security
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 16:45:30 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #ai #agents #information_security
Medium
AI Agents Have a Token Problem: When Valid Access Becomes Dangerous
NIST and CISA are tightening token security, but AI agents expose a deeper problem: a valid token does not mean a valid action.
⤷ Title: How I Found an Undocumented GraphQL Endpoint Leaking Home Addresses of French Company Owners (EUR…
════════════════════════
𐀪 Author: anshh.bohara
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 16:10:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #bounties
════════════════════════
𐀪 Author: anshh.bohara
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 16:10:55 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty #bounties
Medium
How I Found an Undocumented GraphQL Endpoint Leaking Home Addresses of French Company Owners (EUR 1,000 Bounty)
The documented unauthenticated endpoint had 1 query. The undocumented one had 7 queries and 7 mutations. One of those queries returned…
⤷ Title: AI Won’t Fix a Weak Security Foundation
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:31:16 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #information_security #chatgpt #application_security
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:31:16 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #information_security #chatgpt #application_security
Medium
AI Won’t Fix a Weak Security Foundation
The next generation of cybersecurity may be powered by AI, but its effectiveness still depends on the fundamentals underneath it.
⤷ Title: Business Email Compromise (BEC) : de la fraude email à un risque stratégique de confiance numérique
════════════════════════
𐀪 Author: Omar Guemmi (奥马尔·格米)
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:12:30 GMT
════════════════════════
⌗ Tags: #fraud_detection #hacking #email_marketing #risk_management #cybersecurity
════════════════════════
𐀪 Author: Omar Guemmi (奥马尔·格米)
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:12:30 GMT
════════════════════════
⌗ Tags: #fraud_detection #hacking #email_marketing #risk_management #cybersecurity
Medium
Business Email Compromise (BEC) : de la fraude email à un risque stratégique de confiance numérique
Pourquoi les dirigeants, banques, family offices et organisations publiques doivent traiter le BEC comme un risque d’identité, de…
⤷ Title: Google Gemini Hacked Three Real Companies During a Security Test: What the AI Breakout Reveals…
════════════════════════
𐀪 Author: eL Njas!™
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:31:37 GMT
════════════════════════
⌗ Tags: #ai_hack #gemini #infosec #ai_agent
════════════════════════
𐀪 Author: eL Njas!™
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:31:37 GMT
════════════════════════
⌗ Tags: #ai_hack #gemini #infosec #ai_agent
Medium
Google Gemini Hacked Three Real Companies During a Security Test: What the AI Breakout Reveals About Autonomous Cybersecurity.
Google’s Gemini AI has demonstrated a new and increasingly important cybersecurity capability: during a controlled security evaluation in…
⤷ Title: I Tried to Learn Everything I Could About a University’s Servers — Without Touching Them Once
════════════════════════
𐀪 Author: Junaidluqman
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:45:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #osint #passive_reconnaissance #penetration_testing
════════════════════════
𐀪 Author: Junaidluqman
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:45:55 GMT
════════════════════════
⌗ Tags: #cybersecurity #ethical_hacking #osint #passive_reconnaissance #penetration_testing
⤷ Title: What breaking into my first AD network actually taught me
════════════════════════
𐀪 Author: Akbarsp
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 15:57:52 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory
════════════════════════
𐀪 Author: Akbarsp
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 15:57:52 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory
Medium
What breaking into my first AD network actually taught me
I’ve been pentesting for a while now. Web apps, networks, APIs, the usual stuff you’d expect from someone doing this full time. So when I…
⤷ Title: The Responsible Disclosure Dilemma
════════════════════════
𐀪 Author: Akif Shikhlarov
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 16:37:53 GMT
════════════════════════
⌗ Tags: #ethical_hacking
════════════════════════
𐀪 Author: Akif Shikhlarov
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 16:37:53 GMT
════════════════════════
⌗ Tags: #ethical_hacking
Medium
The Responsible Disclosure Dilemma
1. Ethical Considerations
⤷ Title: SQL Injection Lab 1 — How I Retrieved Hidden Data With One Line of Input
════════════════════════
𐀪 Author: Sabarinathkv
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 16:26:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #web_security #sql_injection #ethical_hacking
════════════════════════
𐀪 Author: Sabarinathkv
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 16:26:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #pentesting #web_security #sql_injection #ethical_hacking
Medium
SQL Injection Lab 1 — How I Retrieved Hidden Data With One Line of Input
My first hands-on experience with SQL injection on PortSwigger Web Security Academy
⤷ Title: Resolve Microsoft Excel Copy Paste Issues Now
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:45:47 +0000
════════════════════════
⌗ Tags: #Windows #bug fix #Microsoft Excel #software update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:45:47 +0000
════════════════════════
⌗ Tags: #Windows #bug fix #Microsoft Excel #software update
Daily CyberSecurity
Resolve Microsoft Excel Copy Paste Issues Now
Earlier, the routine September 2026 update released by Microsoft caused multiple unexpected issues in Excel. For many office workers, this spreadsheet application remains a critically essential da…
⤷ Title: Windows Server 2022 Mainstream Support Ends Soon
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:32:33 +0000
════════════════════════
⌗ Tags: #Windows #Microsoft #Server Update #Windows Server 2022
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:32:33 +0000
════════════════════════
⌗ Tags: #Windows #Microsoft #Server Update #Windows Server 2022
Daily CyberSecurity
Windows Server 2022 Mainstream Support Ends Soon
Microsoft launched the Windows Server 2022 operating system back in March 2021. Currently, all Microsoft server platforms operate on the Long-Term Servicing Channel (LTSC). Consequently, the compa…
⤷ Title: Critical IBM MQ Vulnerabilities CVE-2026-10747 Hit 10 CVSS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:20:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_10747 #CVE_2026_10858 #cybersecurity #IBM MQ
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:20:59 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2026_10747 #CVE_2026_10858 #cybersecurity #IBM MQ
Daily CyberSecurity
Critical IBM MQ Vulnerabilities CVE-2026-10747 Hit 10 CVSS
TL;DR Security researchers recently uncovered critical IBM MQ vulnerabilities impacting message processing systems. Specifically, these severe heap buffer overflows allow remote attackers to trigg…
⤷ Title: Password Reset Tokens That Never Die: Testing Invalidation, Not Just Generation
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:50:08 GMT
════════════════════════
⌗ Tags: #weak_password_recovery #session_expiration #password_reset_token #bug_bounty
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:50:08 GMT
════════════════════════
⌗ Tags: #weak_password_recovery #session_expiration #password_reset_token #bug_bounty
Medium
Password Reset Tokens That Never Die: Testing Invalidation, Not Just Generation
CWE-640: Weak Password Recovery Mechanism CWE-613: Insufficient Session Expiration CVSS 3.1: 7.4 (High) —…
⤷ Title: Broken Session Revocation: Proving That Logout Doesn’t Actually Log You Out
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:49:42 GMT
════════════════════════
⌗ Tags: #session_expiration #improper_authentication #bug_bounty #broken_session_revocation
════════════════════════
𐀪 Author: Neel Chauhan
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 19:49:42 GMT
════════════════════════
⌗ Tags: #session_expiration #improper_authentication #bug_bounty #broken_session_revocation
Medium
Broken Session Revocation: Proving That Logout Doesn’t Actually Log You Out
CWE-613: Insufficient Session Expiration CWE-287: Improper Authentication CVSS 3.1: 8.1 (High) — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
⤷ Title: $7,200 for One Request, Thousands of Guesses: Brute-Forcing MFA Through GraphQL Batching
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:56:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #hacking #bug_bounty_tips #bug_bounty
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:56:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #security #hacking #bug_bounty_tips #bug_bounty
Medium
$7,200 for One Request, Thousands of Guesses: Brute-Forcing MFA Through GraphQL Batching
Rate limiting is one of those controls that looks solid in a screenshot and falls apart the moment you understand what it’s actually…
⤷ Title: How a Silent Websocket Led Me to Unauthenticated Uploads on a University’s Exam Platform
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:55:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #growth_hacking #hacking #bug_bounty_tips #bug_bounty_writeup
════════════════════════
𐀪 Author: Priyansh
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 17:55:46 GMT
════════════════════════
⌗ Tags: #bug_bounty #growth_hacking #hacking #bug_bounty_tips #bug_bounty_writeup
Medium
The Anonymous 5-GB File Host That Almost Wasn’t: How a Silent Websocket Led Me to Unauthenticated Uploads on a University’s Exam…
Intro: The Wall
⤷ Title: Foscam MQTT-to-P2P Camera Compromise
════════════════════════
𐀪 Author: Abbas Rajabpour
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:53:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #ethical_hacking #iot_security #security_research
════════════════════════
𐀪 Author: Abbas Rajabpour
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:53:31 GMT
════════════════════════
⌗ Tags: #cybersecurity #application_security #ethical_hacking #iot_security #security_research
Medium
Foscam MQTT-to-P2P Camera Compromise
1. Executive Summary
⤷ Title: Brevo Supply Chain Attack: How One Stolen Cloudflare Key Exposed 100,000+ Websites
════════════════════════
𐀪 Author: Xpert4Cyber
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:57:13 GMT
════════════════════════
⌗ Tags: #malware #supply_chain_attack #wordpress_security #infosec #cybersecurity
════════════════════════
𐀪 Author: Xpert4Cyber
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:57:13 GMT
════════════════════════
⌗ Tags: #malware #supply_chain_attack #wordpress_security #infosec #cybersecurity
Medium
Brevo Supply Chain Attack: How One Stolen Cloudflare Key Exposed 100,000+ Websites
🚨 Brevo Supply Chain Attack: How One Stolen Cloudflare Key Exposed 100,000+ Websites
⤷ Title: Linux uniq Command: Rank Attacker IPs From Raw Logs in Seconds
════════════════════════
𐀪 Author: Xpert4Cyber
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:56:58 GMT
════════════════════════
⌗ Tags: #linux #threat_hunting #incident_response #infosec #cybersecurity
════════════════════════
𐀪 Author: Xpert4Cyber
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:56:58 GMT
════════════════════════
⌗ Tags: #linux #threat_hunting #incident_response #infosec #cybersecurity
Medium
Linux uniq Command: Rank Attacker IPs From Raw Logs in Seconds
Imagine the pager goes off and the authentication log has grown by 40,000 lines overnight. Nobody is reading that by hand.
⤷ Title: We need to talk about the “catch” in AI adoption.
════════════════════════
𐀪 Author: Tharini Anjalee Fernando
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:26:46 GMT
════════════════════════
⌗ Tags: #ai_security #infosec #artificial_intelligence #ai_threats #cybersecurity
════════════════════════
𐀪 Author: Tharini Anjalee Fernando
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:26:46 GMT
════════════════════════
⌗ Tags: #ai_security #infosec #artificial_intelligence #ai_threats #cybersecurity
Medium
We need to talk about the “catch” in AI adoption.
The business case for AI in cybersecurity is clear. The data supports it. Every industry is embedding AI into its operations, and the…
⤷ Title: A beginner pentester’s walkthrough of passive reconnaissance, and why it’s scarier than it sounds
════════════════════════
𐀪 Author: Junaidluqman
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:02:10 GMT
════════════════════════
⌗ Tags: #passive_reconnaissance #osint #ethical_hacking #penetration_testing #information_gathering
════════════════════════
𐀪 Author: Junaidluqman
════════════════════════
ⴵ Time: Sun, 20 Sep 2026 18:02:10 GMT
════════════════════════
⌗ Tags: #passive_reconnaissance #osint #ethical_hacking #penetration_testing #information_gathering
Medium
A beginner pentester’s walkthrough of passive reconnaissance, and why it’s scarier than it sounds
I’m Junaid Luqman, and I’m currently training to become a penetration tester. A few days ago, I sat down for one of the first real labs in…