PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mitigating AI cybersecurity risks with Bug Bounty Programs: A deep dive

yeswehack.com | research | #ai-security | #bug-bounty | #prompt-injection | #llm | #testing | #model-extraction
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Deep dive into AI-focused Bug Bounty management: probabilistic AI scopes, testing for prompt injection, model extraction and poisoning, privacy leakage, and AI's impact on fix/exploit timelines.
Published
Collected

Related coverage

research · projectdiscovery.io
How abliterated models can get you pwned
# How abliterated models can get you pwned Oct 6, 2026 · Prince Chaddha Any open model whose weights have been edited can carry a backdoor, whether it's a task-specific fine-tune, a merged adapter...
blog · hackenproof.com
How We Built an Autonomous AI Security Triager: From LLM to 20,000+ Real Reports
AI made bug hunters sharper, and report volume doubled. How HackenProof built an autonomous AI triager that now handles 70% of submissions.
blog · blog.sentry.security
PIChef. A tool for Prompt Injection inspired by CyberChef
# PIChef. A tool for Prompt Injection inspired by CyberChef #### Sentry 08 Oct 2026 — 6 min read Share Baba Yaga represents PIChef as a keeper of dangerous recipes, mixing strange prompt-injection...
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
research · wiz.io
Inside 90 days of attacks on AI infrastructure
This research provides real-world threat telemetry on how attackers target modern AI deployments and MCP interfaces.
Back