⤷ Title: Major Flaw Exposes Password Managers to “One-Click” Data Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:54:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #1Password #Browser Extensions #clickjacking #cybersecurity #data breach #DEF CON #LastPass #Password Manager #vulnerability
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:54:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #1Password #Browser Extensions #clickjacking #cybersecurity #data breach #DEF CON #LastPass #Password Manager #vulnerability
Penetration Testing Tools
Major Flaw Exposes Password Managers to "One-Click" Data Theft
A new "DOM-based extension clickjacking" vulnerability discovered at DEF CON allows attackers to steal passwords and 2FA codes from popular password managers.
⤷ Title: Grok’s Privacy Crisis: 370,000 Private Conversations Exposed on Google
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:47:14 +0000
════════════════════════
⌗ Tags: #Data Leak #AI #Chatbot #cybersecurity #data leak #Elon Musk #Grok #privacy #search engines #xAI
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:47:14 +0000
════════════════════════
⌗ Tags: #Data Leak #AI #Chatbot #cybersecurity #data leak #Elon Musk #Grok #privacy #search engines #xAI
Penetration Testing Tools
Grok's Privacy Crisis: 370,000 Private Conversations Exposed on Google
A new report reveals that over 370,000 conversations with the xAI chatbot Grok have been exposed to the public via search engines, without user warning.
⤷ Title: AI Job Applicants: The New Fraud Wave Impersonating Candidates in Video Interviews
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:45:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #cybersecurity #Deepfake #hiring #Impersonation #job fraud #North Korea #recruitment #remote work
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:45:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #cybersecurity #Deepfake #hiring #Impersonation #job fraud #North Korea #recruitment #remote work
Penetration Testing Tools
AI Job Applicants: The New Fraud Wave Impersonating Candidates in Video Interviews
A new report reveals how AI bots are impersonating job candidates in video interviews, with some linked to North Korean networks seeking access to corporate systems.
⤷ Title: GodRAT Emerges: A New Remote Access Trojan Poses a Threat to Businesses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:42:09 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #cybercrime #cybersecurity #Financial Sector #GodRAT #kaspersky #malware #Remote Access Trojan #Skype
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:42:09 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Espionage #cybercrime #cybersecurity #Financial Sector #GodRAT #kaspersky #malware #Remote Access Trojan #Skype
Penetration Testing Tools
GodRAT Emerges: A New Remote Access Trojan Poses a Threat to Businesses
A new report from Kaspersky reveals GodRAT, a remote access trojan targeting financial firms via Skype. The malware is an evolution of the Winnti-linked AwesomePuppet.
⤷ Title: Bangkok’s “Phantom Cell Tower” Busted: Inside the Mobile Phishing Scam
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:40:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #cybersecurity #phishing #police operation #scam syndicate #SMS scam #Thailand
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:40:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybercrime #cybersecurity #phishing #police operation #scam syndicate #SMS scam #Thailand
Penetration Testing Tools
Bangkok's "Phantom Cell Tower" Busted: Inside the Mobile Phishing Scam
Thai police arrested two men operating a "false base station" from a van, which broadcasted thousands of fraudulent SMS messages to scam Bangkok residents.
⤷ Title: A New “Browser War” Is Coming: How AI Agents Are Reshaping Cybersecurity
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:36:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #AI Agents #browser security #cybersecurity #enterprise security #Nikesh Arora #Palo Alto Networks #Prisma #SASE
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:36:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI #AI Agents #browser security #cybersecurity #enterprise security #Nikesh Arora #Palo Alto Networks #Prisma #SASE
Penetration Testing Tools
A New "Browser War" Is Coming: How AI Agents Are Reshaping Cybersecurity
Palo Alto Networks CEO Nikesh Arora warns that AI agents will trigger a new "browser war," forcing enterprises to adopt secure, enterprise-grade browsers.
⤷ Title: XSS Exploit via RichText Parser
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:43:34 GMT
════════════════════════
⌗ Tags: #penetration_testing #technology #xss_attack #vulnerability #bug_bounty
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:43:34 GMT
════════════════════════
⌗ Tags: #penetration_testing #technology #xss_attack #vulnerability #bug_bounty
Medium
XSS Exploit via RichText Parser
How a Flaw in Reddit’s Scheduled Post Feature Enabled Malicious JavaScript Execution
⤷ Title: Clipboard DOM-based XSS in GitLab
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:39:42 GMT
════════════════════════
⌗ Tags: #vulnerability #xss_attack #javascript #bug_bounty #gitlab
════════════════════════
𐀪 Author: Monika sharma
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:39:42 GMT
════════════════════════
⌗ Tags: #vulnerability #xss_attack #javascript #bug_bounty #gitlab
Medium
Clipboard DOM-based XSS in GitLab
Unveiling the Hidden Risks of Unsanitized Markdown Fields and Safeguarding Against JavaScript Exploitation
⤷ Title: Mastering WordPress Bug Hunting: A Complete Guide for Security Researchers
════════════════════════
𐀪 Author: coffinxp
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:39:30 GMT
════════════════════════
⌗ Tags: #wordpress #hacking #bug_bounty #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: coffinxp
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:39:30 GMT
════════════════════════
⌗ Tags: #wordpress #hacking #bug_bounty #cybersecurity #penetration_testing
Medium
Mastering WordPress Bug Hunting: A Complete Guide for Security Researchers
Learn step-by-step techniques, tools and strategies to uncover high-impact vulnerabilities in WordPress sites.
⤷ Title: This Is How I Got $750 From My First IDOR
════════════════════════
𐀪 Author: TSxNINJA
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:37:44 GMT
════════════════════════
⌗ Tags: #broken_access_control #infosec #idor #hacking #bug_bounty
════════════════════════
𐀪 Author: TSxNINJA
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:37:44 GMT
════════════════════════
⌗ Tags: #broken_access_control #infosec #idor #hacking #bug_bounty
Medium
First IDOR Via Response Manipulation worth $750
“The $750 IDOR Story: From Recon to Reward”
⤷ Title: ️ KeySentry v2 — Stop API Key Leaks Before They Stop You
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:37:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #api_key #bug_bounty_writeup #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Aditya Bhatt
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:37:00 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #api_key #bug_bounty_writeup #cybersecurity #bug_bounty
Medium
🛡️ KeySentry v2 — Stop API Key Leaks Before They Stop You
KeySentry — Find leaked API keys & secrets in any GitHub repo. The No Mercy Upgrade.
⤷ Title: Buried Treasures in Backups: How .bak Files Handed Me the Keys to Production ️
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:36:56 GMT
════════════════════════
⌗ Tags: #money #hacking #cybersecurity #infosec #bug_bounty
════════════════════════
𐀪 Author: Iski
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:36:56 GMT
════════════════════════
⌗ Tags: #money #hacking #cybersecurity #infosec #bug_bounty
Medium
🔍 Buried Treasures in Backups: How .bak Files Handed Me the Keys to Production 🗝️💾
Hey there!😁
⤷ Title: 5 Best Cybersecurity Jobs with Fat Paycheques
════════════════════════
𐀪 Author: Rashadul Islam
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:53:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #technology #cybersecurity #make_money_online #freelancing
════════════════════════
𐀪 Author: Rashadul Islam
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:53:02 GMT
════════════════════════
⌗ Tags: #bug_bounty #technology #cybersecurity #make_money_online #freelancing
Medium
5 Best Cybersecurity Jobs with Fat Paycheques
High-Paying Cybersecurity Jobs You Should Be Aiming For
⤷ Title: ️♂️ From Recon to Ransom: Red Team Stories That Start With Metadata
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:06:12 GMT
════════════════════════
⌗ Tags: #ai #bug_bounty #information_security #infosec #cybersecurity
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:06:12 GMT
════════════════════════
⌗ Tags: #ai #bug_bounty #information_security #infosec #cybersecurity
Medium
🕵️♂️ From Recon to Ransom: Red Team Stories That Start With Metadata
“Sometimes, the crown jewels aren’t hidden behind firewalls — they’re sitting in the document properties.”
⤷ Title: I Leaked Keywords from Google Drive with a Tiny Side‑Channel ⚡ ($5,000 Bounty)
════════════════════════
𐀪 Author: Yeswehack
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:02:34 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty #infosec #google
════════════════════════
𐀪 Author: Yeswehack
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 08:02:34 GMT
════════════════════════
⌗ Tags: #hacking #cybersecurity #bug_bounty #infosec #google
Medium
I Leaked Keywords from Google Drive with a Tiny Side‑Channel ⚡ ($5,000 Bounty)
by Aditya Sunny (@adityasunny06) • Google VRP • Fix shipped • $5,000 bounty
⤷ Title: Client-Side Security Gone Wrong: Why Frontend Validation Means Nothing
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:56:55 GMT
════════════════════════
⌗ Tags: #infosec #ai #information_security #bug_bounty #cybersecurity
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:56:55 GMT
════════════════════════
⌗ Tags: #infosec #ai #information_security #bug_bounty #cybersecurity
Medium
🔓 Client-Side Security Gone Wrong: Why Frontend Validation Means Nothing
“The front door looks locked… until you realize the windows are wide open.”
⤷ Title: ⚡ 10 JavaScript Patterns That Lead to Security Bugs in Production
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:51:33 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #infosec #bug_bounty #information_security
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:51:33 GMT
════════════════════════
⌗ Tags: #ai #cybersecurity #infosec #bug_bounty #information_security
Medium
⚡ 10 JavaScript Patterns That Lead to Security Bugs in Production
“Most security incidents aren’t because of 0-days. They’re because of everyday mistakes written into code that nobody noticed.”
⤷ Title: ️ Bypassing WAFs 101: Real Tricks That Work in 2025
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:46:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #ai #cybersecurity #information_security
════════════════════════
𐀪 Author: Narendar Battula (nArEn)
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:46:55 GMT
════════════════════════
⌗ Tags: #bug_bounty #infosec #ai #cybersecurity #information_security
Medium
🛡️ Bypassing WAFs 101: Real Tricks That Work in 2025
“A WAF is like airport security. It catches the guy with a knife but waves through the one who hides it inside a toothpaste tube.”
⤷ Title: Mastering WordPress Bug Hunting: A Complete Guide for Security Researchers
════════════════════════
𐀪 Author: coffinxp
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:39:29 GMT
════════════════════════
⌗ Tags: #wordpress #hacking #bug_bounty #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: coffinxp
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:39:29 GMT
════════════════════════
⌗ Tags: #wordpress #hacking #bug_bounty #cybersecurity #penetration_testing
Medium
Mastering WordPress Bug Hunting: A Complete Guide for Security Researchers
Learn step-by-step techniques, tools and strategies to uncover high-impact vulnerabilities in WordPress sites.
⤷ Title: ChatGPT 5 Under Attack: Can Hackers Downgrade AI Security?
════════════════════════
𐀪 Author: Liran Nachman
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:36:21 GMT
════════════════════════
⌗ Tags: #technology #gpt_5 #security #hacking #cybersecurity
════════════════════════
𐀪 Author: Liran Nachman
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:36:21 GMT
════════════════════════
⌗ Tags: #technology #gpt_5 #security #hacking #cybersecurity
Medium
ChatGPT 5 Under Attack: Can Hackers Downgrade AI Security?
ChatGPT 5 Under Attack: Can Hackers Downgrade AI Security?
⤷ Title: Human as Attack Vectors | THM
════════════════════════
𐀪 Author: Welsh
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:01:31 GMT
════════════════════════
⌗ Tags: #phisihng #cybersecurity #tryhackme #hacking #security
════════════════════════
𐀪 Author: Welsh
════════════════════════
ⴵ Time: Fri, 22 Aug 2025 07:01:31 GMT
════════════════════════
⌗ Tags: #phisihng #cybersecurity #tryhackme #hacking #security
Medium
Human as Attack Vectors | THM
TASK 1: INTRODUCTION