Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Web2 Bugs in Web3 Systems

netspi.com | blog | #web3 | #zero-day | #defi | #0day | #dappnode | #bridge-security | #node-management

Summary

NetSPI research reveals multiple 0-days in node management framework Dappnode enabling remote admin access, and analyzes web2 infrastructure attack paths behind the Orbit Chain bridge incident.
Published
Collected

original ↗

Related coverage

blog · certik.com
TRON H1 2026 Review: Stablecoin Rails Meet the Agent Economy
TRON's stablecoin supply grew 9.2% to $89.2B in H1 2026, over six times market pace, while clearing $4.01T in transfers. The network is now extending its settlement rails toward AI-agent payments.
blog · certik.com
Robinhood Chain: From Brokerage to an Onchain Capital Market
Robinhood Chain launched public mainnet on July 1, 2026, connecting 27.4M funded customers and $307B in assets. It offers 2,000+ EU derivative Stock Tokens and 90+ onchain tokenized debt securities.
blog · certik.com
How Venus Is Expanding DeFi Lending on BNB Chain
Venus is expanding DeFi lending on BNB Chain by adding institutional custody access, tokenized equities, and tokenized gold as collateral.
blog · netspi.com
DEF CON 32 Recap: Insights and Experiences from The NetSPI Agents
NetSPI agents recap DEF CON 32: six zero-days found in ATM disk encryption software, General Paul Nakasone on US cyber strategy, and proactive security lessons from talks and workshops.
blog · portswigger.net
Behind enemy lines: bug hunting with Burp Infiltrator
Santiago Díaz demonstrates using Burp Infiltrator to uncover a 0day in JetBrains TeamCity, with Collaborator pingbacks exposing user input reaching dangerous sinks and revealing the code path.
blog · blog.quarkslab.com
Chamilo LMS... It's raining 0days, hallelujah, it's raining 0days
Quarkslab audited Chamilo LMS and found multiple 0-days, including an unauthenticated SQL injection, chaining them into a full pre-auth RCE; eleven CVE-2026 IDs were assigned and fixed by the vendor.
back