PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

‘I thought it was a complete fluke’ – Katie Paxton-Fear on her bug bounty baptism and why AI will never fully replace security researchers

portswigger.net | research | #ai-security | #bug-bounty | #education | #interview | #youtube | #machine-learning
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bug bounty hunter and YouTube educator Katie Paxton-Fear, aka InsiderPhD, recounts finding two bugs on her first day and explains why AI cannot fully replace security researchers.
Published
Collected

Related coverage

blog · bugcrowd.com
AI lectures with Dr. Brumley Part 3 | Securing the AI attack surface
Part three of Bugcrowd's AI lecture series with Dr. Brumley maps AI threats along three axes — knowledge, position and goal — and surveys classical ML attacks and recent LLM-era incidents.
blog · bugcrowd.com
AI lectures with Dr. Brumley Part 1 | Defining AI for CISOs
Bugcrowd's Dr. David Brumley opens his AI lecture series for CISOs by breaking 'AI' into seven distinct mechanisms — from machine learning to symbolic reasoning — each with its own attack surface.
research · blog.quarkslab.com
Weisfeiler-Lehman Graph Kernel for Binary Function Analysis
A method applying the Weisfeiler-Lehman graph kernel to control-flow graphs, comparing binary functions against large known-function databases for classification, clustering and near-duplicate detection.
research · blog.trailofbits.com
Trail of Bits Releases Capture the Flag Field Guide
Trail of Bits releases the free CTF Field Guide, self-guided coursework from Dan Guido's NYU-Poly course and DARPA training material, to help students build skills and form Capture the Flag teams.
research · xbow.com
Machine Learning for Vulnerability Discovery
Machine learning accelerates vulnerability discovery but over-reports false positives without runtime context; the article argues for pairing ML detection with AI-driven exploitability validation.
research · hackenproof.com
How to Read Any Smart Contract Project Without Getting Lost
A methodology guide on reading unfamiliar smart contract projects without getting lost, aimed at security researchers and auditors facing large, complex codebases.
Back