⤷ Title: I Found a Backdoor That Could Log Into Any Account on a Major Web Platform
════════════════════════
𐀪 Author: zoid
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 06:35:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #penetration_testing #infosec_write_ups #bug_bounty_writeup
════════════════════════
𐀪 Author: zoid
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 06:35:45 GMT
════════════════════════
⌗ Tags: #bug_bounty #information_security #penetration_testing #infosec_write_ups #bug_bounty_writeup
Medium
I Found a Backdoor That Could Log Into Any Account on a Major Web Platform
A whitebox pentest, an exposed .git directory, and an authentication shortcut someone really should not have shipped to production.
⤷ Title: OTP Bypass Part 2: Advanced Logic Flaws and Race Conditions
════════════════════════
𐀪 Author: Arrhenius Paelongan
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:51:23 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #cybersecurity #bug_bounty #bug_bounty_writeup
════════════════════════
𐀪 Author: Arrhenius Paelongan
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:51:23 GMT
════════════════════════
⌗ Tags: #penetration_testing #hacking #cybersecurity #bug_bounty #bug_bounty_writeup
Medium
OTP Bypass Part 2: Advanced Logic Flaws and Race Conditions
Introduction
⤷ Title: IDOR: The Bug That Still Breaks Modern Apps
════════════════════════
𐀪 Author: red_shadow_11
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:29:52 GMT
════════════════════════
⌗ Tags: #vulnerability #hacking #bug_bounty_tips #bug_bounty
════════════════════════
𐀪 Author: red_shadow_11
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:29:52 GMT
════════════════════════
⌗ Tags: #vulnerability #hacking #bug_bounty_tips #bug_bounty
Medium
🔓 IDOR: The Bug That Still Breaks Modern Apps
In bug bounty and real-world pentesting, some vulnerabilities never go out of style.
⤷ Title: Understanding Black Hat Hacking: The Dark Side of Cybersecurity
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 06:11:09 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #ethical_hacking #information_security #cybersecurity #hacking
════════════════════════
𐀪 Author: Cynox Security LLP.
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 06:11:09 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #ethical_hacking #information_security #cybersecurity #hacking
Medium
Understanding Black Hat Hacking: The Dark Side of Cybersecurity
Introduction to Black Hat Hacking
⤷ Title: Entra ID Monitoring (THM) Tryhackme WriteUp With All Answer
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 06:07:03 GMT
════════════════════════
⌗ Tags: #microsoft #cyber_security_analyst #blue_team #tryhackme #entra_id
════════════════════════
𐀪 Author: Lawvye
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 06:07:03 GMT
════════════════════════
⌗ Tags: #microsoft #cyber_security_analyst #blue_team #tryhackme #entra_id
Medium
Entra ID Monitoring (THM) Tryhackme WriteUp With All Answer
Description : Learn the main threats and defenses in Entra ID environments and how to detect them.
⤷ Title: TryHackMe — Authentication Bypass (Walkthrough)
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:01:39 GMT
════════════════════════
⌗ Tags: #tryhackme #authentication_bypass #tryhackme_writeup #pentesting #tryhackme_walkthrough
════════════════════════
𐀪 Author: Hudson Lois Marcus
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:01:39 GMT
════════════════════════
⌗ Tags: #tryhackme #authentication_bypass #tryhackme_writeup #pentesting #tryhackme_walkthrough
Medium
TryHackMe — Authentication Bypass (Walkthrough)
In this room, we will learn about different ways of bypassing the website authentication. This prevention is really crucial as the bypass…
⤷ Title: Stealth Webcam Access without User Permission
════════════════════════
𐀪 Author: Muhammad Ahsan Niaz
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:01:20 GMT
════════════════════════
⌗ Tags: #javascript #information_security #web_security #cybersecurity #ethical_hacking
════════════════════════
𐀪 Author: Muhammad Ahsan Niaz
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:01:20 GMT
════════════════════════
⌗ Tags: #javascript #information_security #web_security #cybersecurity #ethical_hacking
Medium
Stealth Webcam Access without User Permission
Introduction
⤷ Title: A Look at ZeroThreat’s Approach to Agentic AI Pentesting
════════════════════════
𐀪 Author: Kate Bennett
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:30:25 GMT
════════════════════════
⌗ Tags: #web_security #agentic_ai #cybersecurity #api_security #pentesting
════════════════════════
𐀪 Author: Kate Bennett
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 05:30:25 GMT
════════════════════════
⌗ Tags: #web_security #agentic_ai #cybersecurity #api_security #pentesting
Medium
A Look at ZeroThreat’s Approach to Agentic AI Pentesting
ZeroThreat’s approach to Agentic AI pentesting is built around a simple idea: security testing should validate real risk, not just detect…
⤷ Title: Weaponized Browsers: How the ‘DRILLAPP’ Backdoor Turns Microsoft Edge into an Espionage Tool
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:03:39 +0000
════════════════════════
⌗ Tags: #Malware #Browser Exploitation #cyber_espionage #cybersecurity #DRILLAPP Backdoor #infosec #JavaScript malware #Lab52 #LAUNDRY BEAR #microsoft edge #Ukraine Cyber Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:03:39 +0000
════════════════════════
⌗ Tags: #Malware #Browser Exploitation #cyber_espionage #cybersecurity #DRILLAPP Backdoor #infosec #JavaScript malware #Lab52 #LAUNDRY BEAR #microsoft edge #Ukraine Cyber Attacks
Daily CyberSecurity
Weaponized Browsers: How the 'DRILLAPP' Backdoor Turns Microsoft Edge into an Espionage Tool
LAB52 uncovers the DRILLAPP backdoor, a novel espionage campaign targeting Ukraine that weaponizes Microsoft Edge for screen recording and surveillance.
⤷ Title: High-Severity Angular XSS Flaw Bypasses Built-In Sanitization
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:03:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular Security #Cross_Site Scripting #CVE_2026_32635 #CVSS 8.6 #cybersecurity #i18n #infosec #Sanitization Bypass #Web App Security #XSS Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:03:01 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Angular Security #Cross_Site Scripting #CVE_2026_32635 #CVSS 8.6 #cybersecurity #i18n #infosec #Sanitization Bypass #Web App Security #XSS Vulnerability
Daily CyberSecurity
High-Severity Angular XSS Flaw Bypasses Built-In Sanitization
An 8.6 CVSS Angular XSS vulnerability (CVE-2026-32635) bypasses built-in sanitization via i18n attributes. Patch your web applications immediately.
⤷ Title: Application Security
════════════════════════
𐀪 Author: J.Dishalan
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:32:41 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity
════════════════════════
𐀪 Author: J.Dishalan
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:32:41 GMT
════════════════════════
⌗ Tags: #application_security #cybersecurity
Medium
Application Security
What is Application Security?
Application Security, as the name suggests, is a security program that directly deals with applications…
Application Security, as the name suggests, is a security program that directly deals with applications…
⤷ Title: Control Drift: Why Your SOC 2 Compliance Can’t Keep Up With AI Written Code
════════════════════════
𐀪 Author: Jost Faganel
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:43:18 GMT
════════════════════════
⌗ Tags: #ai_generated_code #control_drift #application_security #sast #soc_2_compliance
════════════════════════
𐀪 Author: Jost Faganel
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:43:18 GMT
════════════════════════
⌗ Tags: #ai_generated_code #control_drift #application_security #sast #soc_2_compliance
Medium
Control Drift: Why Your SOC 2 Compliance Can’t Keep Up With AI Written Code
I’ve been thinking about compliance lately. A lot. Not in the way most people think about it — not the annual audit, not the checklist, not…
⤷ Title: GlassWorm: The Invisible, Self-Propagating Worm Rewriting Supply Chain Attacks
════════════════════════
𐀪 Author: Dice
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:20:28 GMT
════════════════════════
⌗ Tags: #reverse_engineering #malware #cybersecurity #russia #hacking
════════════════════════
𐀪 Author: Dice
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:20:28 GMT
════════════════════════
⌗ Tags: #reverse_engineering #malware #cybersecurity #russia #hacking
Medium
GlassWorm: The Invisible, Self-Propagating Worm Rewriting Supply Chain Attacks
GlassWorm (aka ForceMemo) is a sophisticated, self-propagating supply chain worm that has compromised 151+ GitHub repos, 72+ Open VSX…
⤷ Title: Ethical Hacking for Beginners —Ethical Hacking Learning Series Day 1: Understanding Hackers…
════════════════════════
𐀪 Author: HusnaAnjum
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:25:37 GMT
════════════════════════
⌗ Tags: #hacking #kali_linux #cybersecurity #linux #ethical_hacking
════════════════════════
𐀪 Author: HusnaAnjum
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:25:37 GMT
════════════════════════
⌗ Tags: #hacking #kali_linux #cybersecurity #linux #ethical_hacking
Medium
Ethical Hacking for Beginners —Ethical Hacking Learning Series Day 1: Understanding Hackers, Cyberspace & Cybersecurity
Introduction
⤷ Title: TryHackMe Searchlight IMINT Writeup (Easy) | Real OSINT Process, Mistakes & Investigation
════════════════════════
𐀪 Author: Manmath somure
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:56:00 GMT
════════════════════════
⌗ Tags: #infosec #osint #cybersecurity #tryhackme #ethical_hacking
════════════════════════
𐀪 Author: Manmath somure
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:56:00 GMT
════════════════════════
⌗ Tags: #infosec #osint #cybersecurity #tryhackme #ethical_hacking
Medium
TryHackMe Searchlight IMINT Writeup (Easy) | Real OSINT Process, Mistakes & Investigation
Real OSINT walkthrough using reverse image search, Google Maps, and investigation techniques to uncover hidden details step by step.
⤷ Title: The “123456” Epidemic: Why We Still Can’t Quit Bad Passwords in 2026
════════════════════════
𐀪 Author: Tania Nunes
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:23:55 GMT
════════════════════════
⌗ Tags: #data_protection #2026_digital_trends #cybersecurity #shinray_digital #infosec
════════════════════════
𐀪 Author: Tania Nunes
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:23:55 GMT
════════════════════════
⌗ Tags: #data_protection #2026_digital_trends #cybersecurity #shinray_digital #infosec
Medium
The “123456” Epidemic: Why We Still Can’t Quit Bad Passwords in 2026
In the digital landscape of 2026, we are surrounded by cutting-edge technology. Quantum computing threats are on the horizon, and AI can…
⤷ Title: Do you know where your data is tonight?
════════════════════════
𐀪 Author: Sujon Al Mamun
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:15:36 GMT
════════════════════════
⌗ Tags: #asset_management #infosec #cybersecurity #grc
════════════════════════
𐀪 Author: Sujon Al Mamun
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:15:36 GMT
════════════════════════
⌗ Tags: #asset_management #infosec #cybersecurity #grc
Medium
Do you know where your data is tonight?
Today we’re starting with the real foundation of security: Asset Management.
⤷ Title: How I Cut Pentest Report Writing From 4 Hours to 15 Minutes
════════════════════════
𐀪 Author: Sai Ram Muthineni
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:38:44 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #penetration_testing #cybersecurity #productivity #software_development
════════════════════════
𐀪 Author: Sai Ram Muthineni
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:38:44 GMT
════════════════════════
⌗ Tags: #artificial_intelligence #penetration_testing #cybersecurity #productivity #software_development
Medium
How I Cut Pentest Report Writing From 4 Hours to 15 Minutes
If you’ve ever done a pentest engagement, you already know the worst part isn’t the hacking. It’s the report.
⤷ Title: Hackers Don’t Break In. They Log In.
════════════════════════
𐀪 Author: Devarshi Acharya
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:34:38 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybercrime #cyber_security_awareness #cybersecurity #technology
════════════════════════
𐀪 Author: Devarshi Acharya
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 08:34:38 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybercrime #cyber_security_awareness #cybersecurity #technology
Medium
Hackers Don’t Break In. They Log In.
When most organizations think about cybersecurity, they imagine hackers aggressively breaking through firewalls or launching complex…
⤷ Title: Top 5 Real-Life MITM Attacks That Shocked the Cybersecurity World
════════════════════════
𐀪 Author: Shreyashettyctr
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:39:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #man_in_the_middle_attack #ec_council_certification #cybersecurity #mitm
════════════════════════
𐀪 Author: Shreyashettyctr
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 07:39:14 GMT
════════════════════════
⌗ Tags: #penetration_testing #man_in_the_middle_attack #ec_council_certification #cybersecurity #mitm
Medium
Top 5 Real-Life MITM Attacks That Shocked the Cybersecurity World
In cybersecurity, some attacks are loud and destructive. Others are silent, invisible, and far more dangerous. Man-in-the-Middle (MITM)…