⤷ Title: $12,000 for Listening to How Long ‘No’ Takes: A Timing Attack That Recovered a Secret API Key
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 09:31:01 GMT
════════════════════════
⌗ Tags: #security #hacking #bug_bounty_writeup #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 09:31:01 GMT
════════════════════════
⌗ Tags: #security #hacking #bug_bounty_writeup #bug_bounty #cybersecurity
Medium
$12,000 for Listening to How Long ‘No’ Takes: A Timing Attack That Recovered a Secret API Key
Most authentication bypasses I’ve found involve getting a system to accept something it shouldn’t. This one never bypassed anything in that…
⤷ Title: “We Must Pace the Frontier” — Said the Labs Still Shipping Models Like It’s Black Friday
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 11:52:39 GMT
════════════════════════
⌗ Tags: #ai #technology #security #ethical_hacking #cybersecurity
════════════════════════
𐀪 Author: Yua Mikanana
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 11:52:39 GMT
════════════════════════
⌗ Tags: #ai #technology #security #ethical_hacking #cybersecurity
Medium
“We Must Pace the Frontier” — Said the Labs Still Shipping Models Like It’s Black Friday
On September 12, 2026, Anthropic CEO Dario Amodei dropped a lengthy essay titled “We Must Pace the Frontier.” The core pitch: the rate at…
⤷ Title: $9,800 for Sending the Same Parameter Twice: An HTTP Parameter Pollution Story That Bypassed a…
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 06:21:01 GMT
════════════════════════
⌗ Tags: #hacking #security #bug_bounty #cybersecurity #bug_bounty_tips
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 06:21:01 GMT
════════════════════════
⌗ Tags: #hacking #security #bug_bounty #cybersecurity #bug_bounty_tips
Medium
$9,800 for Sending the Same Parameter Twice: An HTTP Parameter Pollution Story That Bypassed a Security Control Meant to Stop It
I want to start with something that surprised me when I got back into bug hunting seriously this year: the 2026 bounty landscape has gotten…
⤷ Title: The asset is dead! Long live the asset!
════════════════════════
𐀪 Author: Security Consulting Blogspot
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:55:54 GMT
════════════════════════
⌗ Tags: #application_security #risk_assessment #security_architecture #cybersecurity #threat_modeling
════════════════════════
𐀪 Author: Security Consulting Blogspot
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:55:54 GMT
════════════════════════
⌗ Tags: #application_security #risk_assessment #security_architecture #cybersecurity #threat_modeling
Medium
The asset is dead! Long live the asset!
Author: Andrew Lee-Thorp [1]
⤷ Title: What is prompt injection?
════════════════════════
𐀪 Author: Dan Flanagan
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #security #ai #hacking
════════════════════════
𐀪 Author: Dan Flanagan
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 13:01:01 GMT
════════════════════════
⌗ Tags: #security #ai #hacking
Medium
What is prompt injection?
Prompt injection is attacker-written text that a model treats as an instruction. It can sit anywhere the model reads: a web page, an email…
⤷ Title: Why Zero Trust Security Is Failing: Critical Mistakes That Leave Organizations Vulnerable |by…
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:37:08 GMT
════════════════════════
⌗ Tags: #security_misconfiguration #medium #cybersecurity #penetration_testing #zero_trust
════════════════════════
𐀪 Author: Samadhan shimple
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:37:08 GMT
════════════════════════
⌗ Tags: #security_misconfiguration #medium #cybersecurity #penetration_testing #zero_trust
Medium
Why Zero Trust Security Is Failing: Critical Mistakes That Leave Organizations Vulnerable |by Samadhan Shimple
Zero Trust has become one of the most widely discussed strategies in modern cybersecurity. Organizations are investing in identity…
⤷ Title: Insecure Deserialization
════════════════════════
𐀪 Author: NadaAshraf
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:28:16 GMT
════════════════════════
⌗ Tags: #red_team #security #cybersecurity #penetration_testing #testing
════════════════════════
𐀪 Author: NadaAshraf
════════════════════════
ⴵ Time: Sun, 18 Oct 2026 14:28:16 GMT
════════════════════════
⌗ Tags: #red_team #security #cybersecurity #penetration_testing #testing
Medium
Insecure Deserialization
A complete, lab-by-lab walkthrough of all 10 PortSwigger Web Security Academy insecure-deserialization labs — from Apprentice flag-flipping…
⤷ Title: $4,800 for an Equals Sign: CSV Formula Injection That Turns an Export Feature Into a Payload…
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 06:26:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty_writeup #bug_bounty #security
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 06:26:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #bug_bounty_writeup #bug_bounty #security
Medium
$4,800 for an Equals Sign: CSV Formula Injection That Turns an Export Feature Into a Payload Delivery System
This is the bug I’ve had the hardest time convincing people outside security actually matters. “You typed a formula into a text field, and…
⤷ Title: OpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart Contracts
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 10:11:09 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Hacking News #Agentic AI #AI Agents #Cryptocurrency #Cybersecurity #data breach #OpenAI #Sepolia
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 10:11:09 +0000
════════════════════════
⌗ Tags: #Security #Artificial Intelligence #Hacking News #Agentic AI #AI Agents #Cryptocurrency #Cybersecurity #data breach #OpenAI #Sepolia
Hackread
OpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart Contracts
OpenAI disclosed that an internal AI model hacked a crypto wallet and spent Sepolia test ETH without permission to deploy smart contracts.
⤷ Title: Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:07:29 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Calendar Invites #Check Point #Cyber Attack #Cybersecurity #Microsoft #Microsoft Teams #Outlook #Phishing #Scam #security
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 19 Oct 2026 12:07:29 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #Calendar Invites #Check Point #Cyber Attack #Cybersecurity #Microsoft #Microsoft Teams #Outlook #Phishing #Scam #security
Hackread
Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft
More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new findings from CPR.