PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Nonce CSP bypass using disk cache, ‘quiet side channel’ for request smuggling, Amazon Q and the malicious pull request – ethical hacker news roundup

yeswehack.com | blog | #csp | #gemini-cli | #roundup | #disk-cache | #http-smuggling | #amazon-q
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Roundup: Jorian Woltjer's nonce CSP bypass via bfcache and disk cache, d3d's trust-based HTTP smuggling C2 channel, Tracebit's Gemini CLI hijack, and the malicious Amazon Q pull request.
Published
Collected

Related coverage

blog · yeswehack.com
Chunked-body parsing flaws, making self-XSS great again, using HTTP redirect loops to achieve non-blind SSRFs – ethical hacker news roundup
Roundup: abusing ambiguous chunk line terminators for HTTP smuggling, 'Make Self-XSS Great Again' via credential-less frames, and using HTTP redirect loops to turn SSRF into full-response reads.
blog · yeswehack.com
‘AI a force multiplier not a replacement’, small vs large models, the state of vibe-coded security – ethical hacker news roundup
Roundup: Xclow3n argues AI is a force multiplier but expert judgment still separates noise from CVEs; LiveOverflow finds smaller LLMs win on cost-to-recall; plus the state of vibe-coded security.
blog · yeswehack.com
The Mythos moment, accelerating exploits, CVE Program under pressure – offsec roundup for CISOs
A CISO roundup: Anthropic's Mythos delay as part of exploitation-automation trends, why Bug Bounty still matters amid record Google payouts, shrinking time-to-exploitation and CVE Program pressure.
blog · yeswehack.com
Notepad++ hijack, pwning Claude Code, top web hacking techniques of 2025 – ethical hacker news roundup
Roundup: PortSwigger's top 10 web hacking techniques of 2025 (won by error-based SSTI research), a six-bug pre-auth RCE chain in a SIEM/SOAR appliance, and notable writeups.
blog · yeswehack.com
LLM bug hunters lack intuition, ‘security teams will consolidate visibility’ in 2026, EU Cyber Act vuln disclosure revisions – offsec roundup for CISOs
A CISO roundup: the EU's revised Cybersecurity Act strengthening vulnerability disclosure, 2026 predictions on consolidating visibility and AI agents, and post-quantum migration pressure.
blog · yeswehack.com
World Poker Tour and the Curry-Shah collab, in-flight exploits, does maths maketh the hunter? – ethical hacker news roundup
The year's final roundup: Sam Curry and Shubs Shah's World Poker Tour back-office flaw, in-flight Wi-Fi exploits, Eaton Zveare's 1,000-dealership hack and Brumen's acclaimed syntax-confusion research.
Back