PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Breaking open a propAMM

osec.io | blog | #sap | #security | #exposure | #erp-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# Breaking open a propAMM Renato Marziano, Robert Chen Oct 15, 2026 #solana#reverse-engineering At Accelerate 2025, we talked about making Solana programs open source. A year later, agents have...
Published
Collected

Related coverage

blog · portswigger.net
PortSwigger and SAP forge strategic partnership to enhance enterprise web security
SAP has selected Burp Suite Enterprise Edition as its preferred DAST solution, adopting PortSwigger's scanning engine to secure web applications across its globally distributed cloud platforms.
blog · aikido.dev
More pentesting, same budget, no surprises
Development teams ship faster than ever with AI-assisted coding. Features that previously took weeks can now be delivered in days. But security testing still runs on the old schedule. In Aikido's 2026 State of AI in Pentesting report, we found that 76% of organizations deploy significant production changes weekly or faster, while just 21% validate security on every release.
blog · aikido.dev
Drata and Aikido: audit-ready pentesting, built into your compliance workflow
Continuous control monitoring and a once-a-year, point-in-time pentest don't sit well together. A manual test means scoping, waiting for a slot, and holding up the audit window for the report.
blog · aikido.dev
Your CVE is reachable. But is it exploitable?
Any SCA tool worth its salt has reachability analysis these days. When a dependency has a known vulnerability, these tools can tell you whether your code calls the affected function. This is pretty much non-negotiable because it helps teams focus their security efforts instead of sifting through noise. Every other step in prioritizing dependency CVEs builds on it.
blog · aikido.dev
Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealer
An npm supply chain attack hit SAP's ecosystem: @cap-js and mbt packages gained preinstall hooks running an 11.7 MB Bun-based credential stealer, likely seeded by a token leaked in a CircleCI PR build.
blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
Back