1.The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHubresearch | 2026-09-29 12:42 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #aws
2.Multiple JetBrains IDE plugins caught stealing AI keysblog | 2026-06-16 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
3.CertiK Skill Scanner: The Antivirus for the AI Agetool | 2026-05-27 12:40 | certik.com | Original ↗ | .md | #ai-security | #web3 | #static-analysis
4.Mitigating URL-based Exfiltration in Geminiblog | 2026-03-09 00:00 | bughunters.google.com | Original ↗ | .md | #ai-security | #agentic-ai | #data-exposure
5.Preventing Downloads from Unmanaged Devices in O365research | 2026-02-24 22:19 | projectblack.io | Original ↗ | .md | #cloud | #data-exfiltration | #office-365
6.Turning Cluely Into Malwareblog | 2026-02-14 00:00 | hacktron.ai | Original ↗ | .md | #data-exfiltration | #electron | #desktop-app
7.Lack of isolation in agentic browsers resurfaces old vulnerabilitiesblog | 2026-01-13 12:00 | blog.trailofbits.com | Original ↗ | .md | #agentic-ai | #browser-security | #data-exposure
8.Prompt Injection Isn't a Vulnerabilityresearch | 2025-11-24 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #bug-bounty | #appsec
9.AI Security Risks and Vulnerabilities Enterprises Can’t Ignoreblog | 2025-09-30 18:56 | CVE-2025-32711 | hackerone.com | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
10.Weaponizing image scaling against production AI systemsblog | 2025-08-21 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #prompt-injection | #gemini
11.Understanding Indirect Prompt Injection Attacks in LLM-Integrated Workflowsblog | 2025-06-13 00:00 | netspi.com | Original ↗ | .md | #ai-security | #prompt-injection | #llm
12.How MCP servers can steal your conversation historyblog | 2025-04-23 14:30 | blog.trailofbits.com | Original ↗ | .md | #mcp | #prompt-injection | #llm-security
13.The malware dating guide: Understanding the types of malware on NPMblog | 2025-04-10 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
14.Security Risks of Setting Access Control Allow Origin: *research | 2025-03-17 01:38 | projectblack.io | Original ↗ | .md | #web-security | #data-exfiltration | #cors
15.How to use the new CloudTrail network activity events for AWS VPC Endpointsblog | 2025-03-20 12:00 | wiz.io | Original ↗ | .md | #cloud | #aws | #network-security
16.Portable Data exFiltration: XSS for PDFsresearch | 2024-05-28 13:42 | portswigger.net | Original ↗ | .md | #xss | #ssrf | #pdf
17.How a Prompt Injection Vulnerability Led to Data Exfiltrationvulnerability | 2024-04-29 16:00 | hackerone.com | Original ↗ | .md | #ai-security | #prompt-injection | #jailbreak
18.Beyond the Blog: More AI and Hacking Contentblog | 2023-11-04 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #bug-bounty | #prompt-injection
19.Anti-Scraping Part 2: Implementing Protectionsblog | 2023-07-13 00:00 | netspi.com | Original ↗ | .md | #web-security | #data-exfiltration | #defense-in-depth
20.Server-Side Spreadsheet Injection - Formula Injection to Remote Code Executionvulnerability | 2018-06-11 00:00 | bishopfox.com | Original ↗ | .md | #rce | #appsec | #data-exfiltration
21.DNS Tunneling with Burp Collaboratorblog | 2017-09-26 00:00 | netspi.com | Original ↗ | .md | #burp-suite | #penetration-testing | #collaborator
22.Using recursive grep for harvesting datablog | 2007-04-05 09:02 | portswigger.net | Original ↗ | .md | #burp-suite | #automation | #sql-injection