Curated security research, vulnerabilities, advisories and tools for practitioners.

Top security intelligence

High-signal security research, vulnerabilities, advisories and tools ranked by relevance. (Page 15)

421.

Community Spotlight: Rishi (@rxerium)

tool | 2026-07-13 06:12 | projectdiscovery.io | original ↗ | #bug-bounty

422.

How Aikido Intel detects malware and vulnerabilities first

blog | 2026-07-14 00:00 | aikido.dev | original ↗ | #ai-security | #supply-chain | #open-source

423.

The practical checklist for defending against supply chain attacks

blog | 2026-07-14 00:00 | aikido.dev | original ↗ | #supply-chain | #appsec | #incident-response

424.

Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries

blog | 2026-07-14 00:00 | hunt.io | original ↗ | #ai-security | #agentic-ai | #claude-code

425.

Introducing rCTF v2

blog | 2026-07-14 00:00 | osec.io | original ↗ | #open-source | #ctf | #security-community

426.

Agentic Pentesting with MCP

blog | 2026-07-14 00:00 | caido.io | original ↗ | #ai-security | #pentesting | #agentic-ai

427.

How to Use BugBunny

blog | 2026-07-13 14:00 | bugbunny.ai | original ↗ | #ai-security | #pentesting | #agentic-ai

428.

Why IaC Coverage Belongs on Your Security Dashboard

blog | 2026-07-13 12:34 | wiz.io | original ↗ | #cloud | #cloud-security | #infrastructure-as-code

429.

Security scanning,priced by the work.

blog | 2026-07-13 07:00 | bugbunny.ai | original ↗ | #product-update | #security-tool | #software-testing

430.

How to maintain code quality standards with AI code and vibe coding

blog | 2026-07-13 00:00 | aikido.dev | original ↗ | #ai-security | #appsec | #devsecops

431.

CVE-2026-42980 PoC: Windows kernel WMI integer underflow local privilege escalation

vulnerability | High | 2026-07-07 03:52 | CVE-2026-42980 | github.com | original ↗ | #public-poc | #kernel-security | #privilege-escalation

432.

Where Things Might Go Wrong with Agent Identities in Entra ID—and How to Prevent Disaster

blog | 2026-07-13 00:47 | semperis.com | original ↗ | #ai-security | #agentic-ai | #access-control

433.

Metabase alternatives: comparing platforms for AI analytics

blog | 2026-07-13 00:05 | metabase.com | original ↗ | #ai-security | #metabase | #comparison

434.

I handed the epoll UAF to an agent

blog | 2026-07-13 00:00 | CVE-2026-46242 | guysrd.github.io | original ↗ | #ai-security | #kernel-security | #linux

435.

Agent Identities: Design Deep Dive

research | 2026-07-10 17:20 | semperis.com | original ↗ | #agentic-ai | #access-control | #identity-security

436.

Grok 4.5 Poised To Take Over the Middle of the AI Security Market

blog | 2026-07-10 18:09 | xbow.com | original ↗ | #ai-security | #pentesting | #benchmark

437.

Human-in-the-Loop AI Pentesting

blog | 2026-07-10 12:00 | xbow.com | original ↗ | #ai-security | #pentesting | #continuous-testing

438.

What Automated CTEM Tools Miss, and Why Human Attackers Still Win

blog | 2026-07-10 17:59 | hackerone.com | original ↗ | #ai-security | #pentesting | #red-teaming

439.

CTEM for AI Systems: How to Apply the 5-Stage Framework to Your AI Attack Surface

blog | 2026-07-10 16:30 | hackerone.com | original ↗ | #ai-security | #ai-governance | #attack-surface

440.

PUMA live hacking event revisited: leHACK’s biggest Bug Bounty yet

blog | 2026-07-10 12:28 | yeswehack.com | original ↗ | #bug-bounty | #conference | #security-community

441.

Practice Checkpoint 4: Verifying Tokens and Claims in 3 Entra ID Authentication Flows

blog | 2026-07-11 12:13 | semperis.com | original ↗ | #access-control | #identity-security | #security-training

442.

Heading to Vegas? Meet PortSwigger at Black Hat, BSides, and DEF CON 34.

blog | 2026-07-09 09:20 | portswigger.net | original ↗ | #appsec | #burp-suite | #black-hat

443.

The Rise of Affordable Models: Comparing GLM and Muse Spark on Cyber

blog | 2026-07-09 20:07 | xbow.com | original ↗ | #ai-security | #pentesting | #benchmark

444.

Practice Checkpoint 3: Registering an Agent—With and Without Agent ID

blog | 2026-07-10 20:00 | semperis.com | original ↗ | #agentic-ai | #developer-security | #identity-security

445.

The Agent Registry and How Agent Identities Operate in Entra ID

blog | 2026-07-10 18:17 | semperis.com | original ↗ | #ai-security | #agentic-ai | #access-control

446.

Practice Checkpoint 2: Setting Agent Identity Permissions

blog | 2026-07-10 17:22 | semperis.com | original ↗ | #agentic-ai | #access-control | #identity-security

447.

Web2 Bugs Hiding in Web3: The Smart Contract Security Blind Spot

blog | 2026-07-10 09:55 | hackenproof.com | original ↗ | #supply-chain | #web3 | #vulnerability-research

448.

1,100+ Valid Critical Vulnerabilities Later: The Case for Bug Bounty as Investment

blog | 2026-07-10 09:12 | hackenproof.com | original ↗ | #bug-bounty | #web3 | #vulnerability-management

449.

Why offensive security and exposure management can't stay siloed in the AI era

blog | 2026-07-09 07:27 | yeswehack.com | original ↗ | #ai-security | #vulnerability-management | #attack-surface

450.

Hack the Elephant One Bite at a Time: NUL byte SQL Injection in pdo_firebird and NULL Pointer Dereference in PDO via pdo_pgsql

research | 2026-07-06 11:06 | swarm.ptsecurity.com | original ↗ | #vulnerability-research | #memory-safety | #denial-of-service

← Previous More →