Curated security research, vulnerabilities, advisories and tools for practitioners.

#ethiack

Security coverage tagged ethiack.

1.

KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066)

vulnerability | Critical | 2026-07-29 00:00 | CVE-2026-66066 | ethiack.com | original ↗ | #rce | #ruby-on-rails | #active-storage

2.

Now Detecting: WP2Shell - Pre-Authentication RCE in WordPress Core

vulnerability | Critical | 2026-07-17 00:00 | CVE-2026-63030 | ethiack.com | original ↗ | #rce | #zero-day | #rest-api

3.

Evaluating Pentesting Agents for the Real-World Part 2

research | 2026-07-22 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #agentic-ai

4.

Nextcloud CVE-2026-45281 Cross-Account Calendar Takeover

vulnerability | High | 2026-07-17 00:00 | CVE-2026-45281 | ethiack.com | original ↗ | #vulnerability-research | #access-control | #calendar-security

5.

AI can hack a bank in 21 minutes. The European Central Bank wants answers.

blog | 2026-07-17 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #agentic-ai

6.

Evaluating Pentesting Agents for the Real-World

research | 2026-07-14 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #agentic-ai

7.

Introducing the new Ethiack Portal: Built for the Way You Work Now

blog | 2026-07-02 00:00 | ethiack.com | original ↗ | #pentesting | #agentic-ai | #ctem

8.

Security Had It Backwards. This Is What Comes Next.

blog | 2026-06-30 00:00 | ethiack.com | original ↗ | #vulnerability-management | #continuous-testing | #ctem

9.

Abusing Redirect Discrepancies to leak secrets in URLs

research | 2026-05-18 00:00 | ethiack.com | original ↗ | #secrets | #web-security | #research

10.

How Broadvoice Replaced Firefighting with Continuous, Validated Security

blog | 2026-04-29 00:00 | ethiack.com | original ↗ | #cloud | #cloud-security | #attack-surface

11.

Ethiack's Spring Release: What's New and What's Coming

blog | 2026-04-23 00:00 | ethiack.com | original ↗ | #pentesting | #vulnerability-management | #continuous-testing

12.

Here's What Anthropic's Mythos Means for the Future of Cybersecurity

blog | 2026-04-20 00:00 | ethiack.com | original ↗ | #ai-security | #offensive-security | #claude

13.

The State of Digital Exposure to Cybercrime for European Telecoms

blog | 2026-04-14 00:00 | ethiack.com | original ↗ | #threat-intelligence | #attack-surface | #exposure-management

14.

Mythos didn't change the rules, it showed us they already changed

blog | 2026-04-13 00:00 | ethiack.com | original ↗ | #ai-security | #attack-surface | #offensive-security

15.

Beacon V2: Testing Internal Assets Made Easy

blog | 2026-04-07 00:00 | ethiack.com | original ↗ | #pentesting | #continuous-testing | #kubernetes

16.

The Hidden ROI of Security: How to Put a Number on the Risks You Stop.

blog | 2026-03-12 00:00 | ethiack.com | original ↗ | #risk-management | #business | #security-budget

17.

Understanding our Risk Score, and why it reflects real-world conditions

blog | 2026-03-05 00:00 | ethiack.com | original ↗ | #vulnerability-management | #prioritization | #epss

18.

Hackian and the Ghosts in Your Business Logic

research | 2026-02-19 00:00 | ethiack.com | original ↗ | #bug-bounty | #appsec | #access-control

19.

Agentic Problems and the Rise of Zombie AIs

research | 2026-02-17 00:00 | ethiack.com | original ↗ | #ai-security | #prompt-injection | #llm-security

20.

AI-Powered Hacking in 2026: What's Real, What's Hype

blog | 2026-02-11 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #automation

21.

One-click RCE on OpenClaw in under 2 hours with an Autonomous Hacking Agent

research | 2026-01-29 00:00 | ethiack.com | original ↗ | #ai-security | #rce | #zero-day

22.

The State of Digital Exposure to Cybercrime for European Retail

blog | 2026-01-28 00:00 | ethiack.com | original ↗ | #vulnerability-management | #attack-surface | #data-exposure

23.

Growing, Hosting, Hacking: Ethiack’s 2025 Wrap Up

blog | 2025-12-30 00:00 | ethiack.com | original ↗ | #ai-security | #year-in-review | #company-news

24.

Grafana CVE-2025-6023 Bypass: A Technical Deep Dive

vulnerability | High | 2025-11-27 00:00 | CVE-2025-6023 | ethiack.com | original ↗ | #vulnerability-research | #attack-chains | #xss

25.

Introducing the Hackian - an AI agent that can hack

blog | 2025-10-27 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #ai-agents

26.

How U.Porto Brought 5,000+ Assets Under Continuous Validation

blog | 2025-08-21 00:00 | ethiack.com | original ↗ | #ai-security | #continuous-testing | #attack-surface

27.

AI Pentesting Without the Noise: Hackbots and the Verifier

research | 2025-08-07 00:00 | ethiack.com | original ↗ | #ai-security | #ai-pentesting | #verifier

28.

Bypassing WAFs for Fun and JS Injection with Parameter Pollution

research | 2025-08-04 00:00 | ethiack.com | original ↗ | #web-security | #xss | #waf

29.

Don’t Fear The AI Reaper: Using LLMs to Hack Better and Faster

blog | 2025-06-27 00:00 | ethiack.com | original ↗ | #ai-security | #offensive-security | #llm

30.

From Compliance to Continuous Security: Ethiack's Vision For Financial Cybersecurity

blog | 2025-06-03 00:00 | ethiack.com | original ↗ | #compliance | #ethical-hacking | #interview