How an invalid block switch led to memory corruption, and what the patch changes.

Two memory bugs, the fixes, and what developers should update.

Picture an organization with a WAF, a valid TLS certificate and a yearly penetration test that still finds its customer data on a public…

Series: From P4 to P1: The Bug Hunter’s Journey Day: 02/30 Topic: Technology Fingerprinting, Manual Validation, and Risk Assessment

Two vulnerabilities hidden in one of the internet’s most widely used programming languages triggered emergency security patches…

Every company that runs our free Surface Check gets an A to F grade for the part of their security that faces the public internet. We have…

The AI assistant isn’t the target — it’s the confused deputy you weaponize against everything sitting behind it.

Two critical vulnerabilities in PHP exposed a deeper problem in memory safety — and demonstrated how AI-assisted security research can help…

How a textbook-secure application, CSRF tokens, SameSite cookies, strict CORS, and a WAF, fell to a single HTML file

Difficulty: Practitioner