Curated security research, vulnerabilities, advisories and tools for practitioners.

Top security intelligence

High-signal security research, vulnerabilities, advisories and tools ranked by relevance. (Page 54)

1591.

Understanding technical debt: The new zero day

blog | 2025-11-18 13:48 | bugcrowd.com | original ↗ | #cloud-security | #vulnerability-management | #remediation

1592.

Blueprint for Security: A Guide to Code, Governance, and Response Frameworks

blog | 2025-11-19 13:00 | wiz.io | original ↗ | #cloud | #cloud-security | #compliance

1593.

‘Bug Bounty helps us meet regulatory requirements ahead of time’: payments provider KOMOJU

blog | 2025-11-18 09:21 | yeswehack.com | original ↗ | #bug-bounty | #compliance | #crowdsourced-security

1594.

The Complete Guide to Hunting Cobalt Strike - Part 2: 10+ HuntSQL Recipes to Find Cobalt Strike

blog | 2025-11-19 00:00 | hunt.io | original ↗ | #threat-detection | #threat-hunting | #c2

1595.

What is AI red teaming?

blog | 2025-11-17 13:00 | bugcrowd.com | original ↗ | #ai-security | #offensive-security | #llm

1596.

Injection for an athlete

research | 2025-11-14 14:07 | swarm.ptsecurity.com | original ↗ | #android | #mobile-security | #firmware

1597.

Level up your Solidity LLM tooling with Slither-MCP

blog | 2025-11-15 12:00 | blog.trailofbits.com | original ↗ | #ai-security | #mcp | #smart-contract

1598.

Hacking with Burp AI in the Chesspocalypse: API expert Corey Ball showcases how Burp AI can support pentesters.

blog | 2025-11-14 15:09 | portswigger.net | original ↗ | #ai-security | #cloud | #sql-injection

1599.

How we avoided side-channels in our new post-quantum Go cryptography libraries

blog | 2025-11-14 12:00 | blog.trailofbits.com | original ↗ | #open-source | #cryptography | #post-quantum

1600.

Effortless Web Security: Secure by Design in the Wild

blog | 2025-11-14 00:00 | bughunters.google.com | original ↗ | #web-security | #secure-by-design | #google

1601.

Introducing HTTP Anomaly Rank

research | 2025-11-11 14:41 | portswigger.net | original ↗ | #ai-security | #burp-suite | #web-security

1602.

Building checksec without boundaries with Checksec Anywhere

blog | 2025-11-13 12:00 | blog.trailofbits.com | original ↗ | #open-source | #binary-analysis | #tool-release

1603.

Anatomy of an Automated Patch: Fixing a File Upload RCE CVE-2025-59304

vulnerability | Critical | 2025-11-06 00:00 | CVE-2025-59304 | depthfirst.com | original ↗ | #rce | #path-traversal | #automated-patching

1604.

Stop Scheduling Security. Start Securing with XBOW Lightspeed Pentest On-Demand.

blog | 2025-11-12 13:00 | xbow.com | original ↗ | #ai-security | #pentesting | #compliance

1605.

Google Unified Security Recommended Program Names Wiz Among First 3 Strategic Partners

blog | 2025-11-13 17:00 | wiz.io | original ↗ | #cloud-security | #mcp | #partnership

1606.

How Structured Intelligence Transforms Vulnerability Validation

blog | 2025-11-12 15:17 | hackerone.com | original ↗ | #agentic-ai | #vulnerability-management | #remediation

1607.

Real-world cyber events influenced by the OG hacker movie, WarGames

blog | 2025-11-12 13:15 | bugcrowd.com | original ↗ | #history | #bugcrowd | #wargames

1608.

Beyond Models: JFrog AI Catalog Evolves to Detect Shadow AI and Govern MCPs

blog | 2025-11-13 07:55 | jfrog.com | original ↗ | #ai-security | #supply-chain | #ai-governance

1609.

Securing Vibe Coding: JFrog Introduces AI-Generated Code Validation

blog | 2025-11-13 07:55 | jfrog.com | original ↗ | #ai-security | #supply-chain | #jfrog

1610.

The Complete Guide to Hunting Cobalt Strike – Part 1: Detecting in Open Directories

blog | 2025-11-13 00:00 | hunt.io | original ↗ | #threat-hunting | #c2 | #cobalt-strike

1611.

Introducing Posture Issues: Transform Security Findings into Actionable Outcomes

blog | 2025-11-12 14:03 | wiz.io | original ↗ | #cloud-security | #vulnerability-management | #compliance

1612.

Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks

research | 2025-11-10 13:34 | wiz.io | original ↗ | #ai-security | #secrets | #github

1613.

Secrets Detection: A Practical Guide to Finding and Preventing Leaked Credentials

blog | 2025-11-12 00:00 | aikido.dev | original ↗ | #git | #ci-cd | #sast

1614.

The Security Imperative: Trust, Speed, and Integral Defense

blog | 2025-11-11 17:58 | jfrog.com | original ↗ | #supply-chain | #appsec | #jfrog

1615.

AI Code Review Should Operate Like an Engineer

blog | 2025-11-10 16:26 | hackerone.com | original ↗ | #ai-security | #appsec | #devsecops

1616.

Salesforce-Connected Third-Party Drift Application Incident Response Update

blog | 2025-11-10 16:07 | hackerone.com | original ↗ | #supply-chain | #incident-response | #hackerone

1617.

Cyber budgets still growing (but not fast enough), ‘AI and automation are operational imperatives’, the real-world impact of boosting Bug Bounty rewards – OffSec roundup for CISOs

blog | 2025-11-10 13:50 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #microsoft

1618.

Kubevirt security audit

research | 2025-11-06 23:00 | blog.quarkslab.com | original ↗ | #kubernetes | #virtualization | #vulnerability

1619.

Empower and Accelerate Your SOC with the Blue Agent

blog | 2025-11-10 14:39 | wiz.io | original ↗ | #ai-security | #cloud | #incident-response

1620.

10 B2B SaaS product metrics that should be on your dashboard

blog | 2025-11-10 00:05 | metabase.com | original ↗ | #saas | #analytics | #sql

← Previous More →