Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Ultimate double-clickjacking exploit, novel HTTP/2 request tunnelling techniques, when encryption makes matters worse – ethical hacker news roundup

yeswehack.com | blog | #web-security | #http2 | #roundup | #double-clickjacking | #http-request-tunnelling | #openpgpjs

Summary

Roundup: an 'ultimate' double-clickjacking PoC with a fake Cloudflare Captcha and Flappy Bird, underrated HTTP request tunnelling attacks, and a critical OpenPGP.js signature spoofing flaw.
Published
Collected

original ↗

Related coverage

  1. Caido v0.58.0 (caido.io)
  2. Rickrolling the World Cup, unleashing AI across Google, 0-click stored XSS on Next.js – ethical hacker roundup (yeswehack.com)
  3. ‘AI a force multiplier not a replacement’, small vs large models, the state of vibe-coded security – ethical hacker news roundup (yeswehack.com)
  4. The Mythos moment, accelerating exploits, CVE Program under pressure – offsec roundup for CISOs (yeswehack.com)
  5. Notepad++ hijack, pwning Claude Code, top web hacking techniques of 2025 – ethical hacker news roundup (yeswehack.com)
  6. LLM bug hunters lack intuition, ‘security teams will consolidate visibility’ in 2026, EU Cyber Act vuln disclosure revisions – offsec roundup for CISOs (yeswehack.com)

back