Curated security research, vulnerabilities, advisories and tools for practitioners.

Top security intelligence

High-signal security research, vulnerabilities, advisories and tools ranked by relevance. (Page 71)

2101.

Free for the Community, Built by JFrog: Introducing the DSSE Attestation Online Decoder

blog | 2025-07-22 16:07 | jfrog.com | original ↗ | #supply-chain | #jfrog | #tooling

2102.

Your hacking style based on your zodiac sign

blog | 2025-07-21 14:00 | bugcrowd.com | original ↗ | #bugcrowd | #humor | #zodiac

2103.

How We Escalate Critical Reports Faster Using Hai + Automations

blog | 2025-07-21 13:55 | hackerone.com | original ↗ | #bug-bounty | #incident-response | #automation

2104.

Hacker opinion piece | Will artificial intelligence replace hackers?

blog | 2025-07-21 12:00 | bugcrowd.com | original ↗ | #ai-security | #bug-bounty | #automation

2105.

Cloud Security Tools Explained: Key Capabilities & Evaluation Tips

blog | 2025-07-22 00:00 | aikido.dev | original ↗ | #cloud | #cloud-security | #tooling

2106.

Clickfix on macOS: AppleScript Stealer, Terminal Phishing, and C2 Infrastructure

blog | 2025-07-22 00:00 | hunt.io | original ↗ | #phishing | #macos | #c2

2107.

The Raspberry Pi's Wi-Fi Glow-Up

blog | 2025-07-22 00:00 | kali.org | original ↗ | #firmware | #kali-linux | #nexmon

2108.

Daemon Ex Plist: LPE via MacOS Daemons

research | 2025-07-17 15:11 | swarm.ptsecurity.com | original ↗ | #macos | #local-privilege-escalation | #launchd

2109.

ControlPlane Local Privilege Escalation Vulnerability on macOS

vulnerability | 2025-07-14 22:00 | blog.quarkslab.com | original ↗ | #privilege-escalation | #macos | #vulnerability

2110.

SharePoint Unknown CVE Unveiled: RCE via WebPart Properties Deserialization

vulnerability | 2025-07-16 09:42 | CVE-2024-38018 | blog.viettelcybersecurity.com | original ↗ | #rce | #deserialization | #sharepoint

2111.

Dùng AI để tìm bug - Phần 1: Tìm SQL Injection trong PHP

vulnerability | 2025-07-16 09:41 | blog.viettelcybersecurity.com | original ↗ | #ai-security | #bug-bounty | #php

2112.

Golden dMSA: What Is dMSA Authentication Bypass?

vulnerability | 2025-07-16 09:30 | semperis.com | original ↗ | #active-directory | #authentication-bypass | #privilege-escalation

2113.

Building secure messaging is hard: A nuanced take on the Bitchat security debate

blog | 2025-07-18 11:00 | blog.trailofbits.com | original ↗ | #cryptography | #vulnerability-analysis | #trail-of-bits

2114.

Repeater Strike: manual testing, amplified

research | 2025-07-15 13:46 | portswigger.net | original ↗ | #ai-security | #burp-suite | #automation

2115.

Fox Den Pull List: Our Favorite Comics

blog | 2025-07-17 00:00 | bishopfox.com | original ↗ | #conference | #security-culture | #red-team

2116.

The Leading CISO Strategy to Pentest as a Service

blog | 2025-07-17 16:48 | hackerone.com | original ↗ | #ai-security | #cloud | #pentesting

2117.

NVIDIAScape - Critical NVIDIA AI Vulnerability: A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266)

tool | 2025-07-17 14:46 | CVE-2025-23266 | wiz.io | original ↗ | #ai-security | #container-security | #nvidia

2118.

Hannibal Stealer vs. Browser Security

blog | 2025-07-18 00:00 | netlas.io | original ↗ | #malware | #browser-security | #chrome

2119.

Introducing JFrog’s MCP Server: Better vibes and easier AI automation

blog | 2025-07-17 13:15 | jfrog.com | original ↗ | #ai-security | #automation | #devops

2120.

How to find bugs on a hardened target using gadgets

blog | 2025-07-16 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #methodology | #gadgets

2121.

‘The most challenging part is the psychological one’ – leorac on the ups and downs of Bug Bounty hunting

blog | 2025-07-16 10:32 | yeswehack.com | original ↗ | #bug-bounty | #interview | #mindset

2122.

Wiz MCP Server Now Available in the new AWS Marketplace AI Agents and Tools category

blog | 2025-07-17 09:00 | wiz.io | original ↗ | #ai-security | #cloud | #cloud-security

2123.

Harden Your Containers with Aikido x Root

blog | 2025-07-17 00:00 | aikido.dev | original ↗ | #supply-chain | #vulnerability-management | #container-security

2124.

630K gov.br Subdomains Abused in SEO Poisoning Attack

blog | 2025-07-17 00:00 | hunt.io | original ↗ | #redirects | #brazil | #black-hat-seo

2125.

Watch the on-demand webinar: Shift left without the strain

blog | 2025-07-14 13:00 | portswigger.net | original ↗ | #webinar | #false-positives | #dast

2126.

The UK’s New Software Security Code of Practice and How JFrog Can Help

blog | 2025-07-16 11:10 | jfrog.com | original ↗ | #appsec | #compliance | #jfrog

2127.

When the Heat Gets to Your Database: A Refreshing SQL Injection Discovery in Z-Push

vulnerability | 2025-07-10 12:00 | xbow.com | original ↗ | #vulnerability-research | #sql-injection | #web-security

2128.

Shift Acquisition

blog | 2025-07-16 00:00 | caido.io | original ↗ | #ai-security | #caido | #plugin

2129.

Google Pixel Root Guide

research | 2025-07-12 11:49 | projectblack.io | original ↗ | #android | #mobile-testing | #google-pixel

← Previous More →