PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

US court ruling on Uber breach slammed, red teamers cautious on AI, OffSec offers ‘strategic edge’ – OffSec roundup for CISOs

yeswehack.com | blog | #ai-security | #red-team | #responsible-disclosure | #cfaa | #roundup | #uber
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Roundup: a US court ruling on Uber's breach case raises concerns for responsible disclosure; a UK report finds red teams rarely use AI beyond basics; PwC calls offensive security a necessity.
Published
Collected

Related coverage

blog · yeswehack.com
Why ‘HTTP/1.1 must die’, Intel exploits, C# Random hack with no maths – ethical hacker news roundup
Roundup: James Kettle's 'HTTP/1.1 must die' desync research, Eaton Zveare's Intel exploits, Doyensec's black-box C# Random account takeover, and a US court ruling's implications for disclosure.
blog · yeswehack.com
‘I usually choose targets that offer value to society’: krevetk0 on his principled approach to Bug Bounty hunting
Berlin-based Bug Bounty hunter krevetk0 talks about moving from QA into hacking, choosing socially valuable targets such as healthcare and banking, and the findings that shaped his career.
blog · yeswehack.com
‘AI a force multiplier not a replacement’, small vs large models, the state of vibe-coded security – ethical hacker news roundup
Roundup: Xclow3n argues AI is a force multiplier but expert judgment still separates noise from CVEs; LiveOverflow finds smaller LLMs win on cost-to-recall; plus the state of vibe-coded security.
blog · yeswehack.com
The Mythos moment, accelerating exploits, CVE Program under pressure – offsec roundup for CISOs
A CISO roundup: Anthropic's Mythos delay as part of exploitation-automation trends, why Bug Bounty still matters amid record Google payouts, shrinking time-to-exploitation and CVE Program pressure.
blog · yeswehack.com
Notepad++ hijack, pwning Claude Code, top web hacking techniques of 2025 – ethical hacker news roundup
Roundup: PortSwigger's top 10 web hacking techniques of 2025 (won by error-based SSTI research), a six-bug pre-auth RCE chain in a SIEM/SOAR appliance, and notable writeups.
blog · yeswehack.com
LLM bug hunters lack intuition, ‘security teams will consolidate visibility’ in 2026, EU Cyber Act vuln disclosure revisions – offsec roundup for CISOs
A CISO roundup: the EU's revised Cybersecurity Act strengthening vulnerability disclosure, 2026 predictions on consolidating visibility and AI agents, and post-quantum migration pressure.
Back