⤷ Title: GitLab Patch: High-Severity XSS & AI Flaws Expose User Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 02:08:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Security #CVE_2025_9222 #DevSecOps #gitlab #GitLab Duo #software update #vulnerability management #XSS (Cross_Site Scripting)
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 02:08:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Application Security #CVE_2025_9222 #DevSecOps #gitlab #GitLab Duo #software update #vulnerability management #XSS (Cross_Site Scripting)
Daily CyberSecurity
GitLab Patch: High-Severity XSS & AI Flaws Expose User Data
GitLab has issued a critical security release for its Community Edition (CE) and Enterprise Edition (EE) platforms, patching a raft of vulnerabilities that range from high-severity Cross-Site Scri…
⤷ Title: Recruiting Google Gemini’s Email Summarizer as a Phishing Aid
════════════════════════
𐀪 Author: Mike Sheward
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:23:09 GMT
════════════════════════
⌗ Tags: #llm #infosec #gemini #ai #bug_bounty
════════════════════════
𐀪 Author: Mike Sheward
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:23:09 GMT
════════════════════════
⌗ Tags: #llm #infosec #gemini #ai #bug_bounty
Medium
Recruiting Google Gemini’s Email Summarizer as a Phishing Aid
Note: I originally disclosed these findings to the Google AI Bug Bounty (or VRP program), but they rejected them as being a non-qualified…
⤷ Title: LangChain Serialization Vulnerabilities: When LLMs Generate Exploits
════════════════════════
𐀪 Author: David Anderson
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 02:25:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #artificial_intelligence #ai #application_security
════════════════════════
𐀪 Author: David Anderson
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 02:25:24 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #artificial_intelligence #ai #application_security
Medium
LangChain Serialization Vulnerabilities: When LLMs Generate Exploits
Two critical vulnerabilities were published December 23, 2025 affecting LangChain Python (CVE-2025–68664, CVSS 9.3) and JavaScript…
⤷ Title: Archa CTF 2026 — Mobile (Writeups)
════════════════════════
𐀪 Author: CynPhone
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:38:01 GMT
════════════════════════
⌗ Tags: #mobile_games #hacking #ctf_writeup #mobile_security #ctf
════════════════════════
𐀪 Author: CynPhone
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:38:01 GMT
════════════════════════
⌗ Tags: #mobile_games #hacking #ctf_writeup #mobile_security #ctf
Medium
Archa CTF 2026 — Mobile (Writeups)
สวัสดีครับ ‘โฟน’ นะครับ สำหรับWriteups ในครั้งนี้มาจากการแข่งขัน Archa CTF บอกได้เลยครับว่าโจทย์สนุกทุกข้อ💖…
⤷ Title: Why Spotify’s latest problem could change music forever
════════════════════════
𐀪 Author: Abstract Mind
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:28:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #artificial_intelligence #hacking #security
════════════════════════
𐀪 Author: Abstract Mind
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:28:33 GMT
════════════════════════
⌗ Tags: #cybersecurity #artificial_intelligence #hacking #security
⤷ Title: Token Leakage in Password Reset Flows
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:15:12 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #pentesting #passwords #cybersecurity
════════════════════════
𐀪 Author: Muhammed Asfan | Cybersecurity Analyst
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:15:12 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #bug_bounty_tips #pentesting #passwords #cybersecurity
Medium
Token Leakage in Password Reset Flows
A Simple, High‑Impact Bug Bounty Technique
⤷ Title: CISA Flags Microsoft Office and HPE OneView Bugs as Actively Exploited
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 10:22:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 10:22:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: The “Blind Sniper” Attack: Spamming Thousands of Users Without Knowing Their Email Addresses
════════════════════════
𐀪 Author: Zer0Figure
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 04:32:42 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #security #cybersecurity #bug_bounty_tips
════════════════════════
𐀪 Author: Zer0Figure
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 04:32:42 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #security #cybersecurity #bug_bounty_tips
Medium
The “Blind Sniper” Attack: Spamming Thousands of Users Without Knowing Their Email Addresses
Most email bombers need a target email. I found a way to turn a User ID into a weapon, spamming verified users and causing financial chaos…
⤷ Title: Ni8mare: Unauthenticated RCE in n8n (CVE-2026–21858)
════════════════════════
𐀪 Author: Praveen Malhan
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:56:54 GMT
════════════════════════
⌗ Tags: #application_security #open_source_security #ai_security #n8n #supply_chain_security
════════════════════════
𐀪 Author: Praveen Malhan
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:56:54 GMT
════════════════════════
⌗ Tags: #application_security #open_source_security #ai_security #n8n #supply_chain_security
Medium
Ni8mare: Unauthenticated RCE in n8n (CVE-2026–21858)
In early 2026, security researchers revealed a critical vulnerability in n8n, a popular automation platform, that allows attackers to…
⤷ Title: Active Directory: Fundamental kirish va arxitektura
════════════════════════
𐀪 Author: Mukhammadiyev
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 05:53:10 GMT
════════════════════════
⌗ Tags: #hacking #active_directory_security #active_directory_attack #corporate_security
════════════════════════
𐀪 Author: Mukhammadiyev
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 05:53:10 GMT
════════════════════════
⌗ Tags: #hacking #active_directory_security #active_directory_attack #corporate_security
Medium
Active Directory: Fundamental kirish va arxitektura
Active Directory nima va nima uchun u barcha breach’larning markazida?
⤷ Title: Tieu Tuyet Linh Chu Mod APK
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 04:35:33 GMT
════════════════════════
⌗ Tags: #tieu_tuyet_linh_chu #apkpure #games #hacking
════════════════════════
𐀪 Author: Apkpuredev
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 04:35:33 GMT
════════════════════════
⌗ Tags: #tieu_tuyet_linh_chu #apkpure #games #hacking
Medium
Tieu Tuyet Linh Chu Mod APK
Tiểu Tuyết Lĩnh Chủ Mod APK là phiên bản hack của tựa game nhập vai hấp dẫn với vô hạn tiền và bông tuyết, giúp bạn dễ dàng nâng cấp và mua…
⤷ Title: Secure Network Architecture — Writeup
════════════════════════
𐀪 Author: Mahir
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 05:38:18 GMT
════════════════════════
⌗ Tags: #security #tryhackme #tryhackme_walkthrough #networking #cybersecurity
════════════════════════
𐀪 Author: Mahir
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 05:38:18 GMT
════════════════════════
⌗ Tags: #security #tryhackme #tryhackme_walkthrough #networking #cybersecurity
Medium
Secure Network Architecture — Writeup
This is a short writeup for the TryHackMe room — Network Structure Architecture
⤷ Title: OWASP API Top 10 — Mass Assignment Explained Through a Practical Flask Lab
════════════════════════
𐀪 Author: 0xMiawChan
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:53:13 GMT
════════════════════════
⌗ Tags: #api_pentesting #cybersecurity #owasp_api_security_top_10 #ethical_hacking #pentesting
════════════════════════
𐀪 Author: 0xMiawChan
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 03:53:13 GMT
════════════════════════
⌗ Tags: #api_pentesting #cybersecurity #owasp_api_security_top_10 #ethical_hacking #pentesting
Medium
OWASP API Top 10 — Mass Assignment Explained Through a Practical Flask Lab
A practical lab aligned with OWASP API Top 10 to understand Mass Assignment risks
⤷ Title: OpenAI Launches ChatGPT Health with Isolated, Encrypted Health Data Controls
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 12:27:00 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 12:27:00 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: T pros up at night.
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 07:09:24 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ethical_hacking #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 07:09:24 GMT
════════════════════════
⌗ Tags: #hacking #bug_bounty #ethical_hacking #penetration_testing #cybersecurity
⤷ Title: I Thought XSS Was Easy…Until Nothing Worked
════════════════════════
𐀪 Author: Namya
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 07:46:43 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #learning_cybersecurity #xss_attack #cybersecurity #hacking
════════════════════════
𐀪 Author: Namya
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 07:46:43 GMT
════════════════════════
⌗ Tags: #xss_vulnerability #learning_cybersecurity #xss_attack #cybersecurity #hacking
Medium
I Thought XSS Was Easy…Until Nothing Worked
When I first learned about XSS, it felt stupidly simple. All you gotta do is input field → alert(1) → popup and voila! you’re a HACKER. At…
⤷ Title: Ethical Hacking Fundamentals: What I Learned as a CEH Student.
════════════════════════
𐀪 Author: Syber Security beginner.
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 06:41:11 GMT
════════════════════════
⌗ Tags: #hacking #technology #sybersecurity
════════════════════════
𐀪 Author: Syber Security beginner.
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 06:41:11 GMT
════════════════════════
⌗ Tags: #hacking #technology #sybersecurity
Medium
Ethical Hacking Fundamentals: What I Learned as a CEH Student.
CEH beginner sharing basic Ethical Hacking knowledge.
⤷ Title: Exploring the Best Flipper Zero Alternatives for Hardware Security
════════════════════════
𐀪 Author: T-Jay Bautista
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 06:12:20 GMT
════════════════════════
⌗ Tags: #penetration_testing #flipper_zero #security #hacker #hacking
════════════════════════
𐀪 Author: T-Jay Bautista
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 06:12:20 GMT
════════════════════════
⌗ Tags: #penetration_testing #flipper_zero #security #hacker #hacking
Medium
Exploring the Best Flipper Zero Alternatives for Hardware Security
While the Flipper Zero has become the “Swiss Army Knife” of the hardware hacking world, its popularity often leads to stock shortages or…
⤷ Title: Analyzing a Legacy VNC Authentication Weakness in a Controlled Lab Environment
════════════════════════
𐀪 Author: Tejas Kamble
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 06:59:29 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #infosec #vulnerability_analysis #ethical_hacking #cybersecurity
════════════════════════
𐀪 Author: Tejas Kamble
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 06:59:29 GMT
════════════════════════
⌗ Tags: #vulnerability_assessment #infosec #vulnerability_analysis #ethical_hacking #cybersecurity
Medium
Analyzing a Legacy VNC Authentication Weakness in a Controlled Lab Environment
Remote access services are frequently targeted during security assessments due to their high impact when misconfigured. Legacy…
⤷ Title: My PJPT exam experience 2026
════════════════════════
𐀪 Author: Gothos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 07:49:43 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #tcm_security #pjpt #penetration_testing #cybersecurity
════════════════════════
𐀪 Author: Gothos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 07:49:43 GMT
════════════════════════
⌗ Tags: #cybersecurity_training #tcm_security #pjpt #penetration_testing #cybersecurity
Medium
My PJPT exam experience 2026
In the last days of 2025, in that magical time between Christmas and New year’s (the period also known as the void) I decided to use my…