1.Multiple JetBrains IDE plugins caught stealing AI keysblog | 2026-06-16 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
2.Inline Style Exfiltration: leaking data with chained CSS conditionalsresearch | 2025-08-27 07:35 | portswigger.net | Original ↗ | .md | #chromium | #exfiltration | #css
3.Another Byte Bites the Dust - How XBOW Turned a Blind SSRF into a File Reading Oraclevulnerability | Critical | 2025-07-28 12:00 | xbow.com | Original ↗ | .md | #vulnerability-research | #ssrf | #exfiltration
4.Stealing HttpOnly cookies with the cookie sandwich techniqueresearch | 2025-06-30 16:01 | portswigger.net | Original ↗ | .md | #cookies | #exfiltration | #session-security
5.Blind CSS Exfiltration: exfiltrate unknown web pagesresearch | 2024-07-11 10:09 | portswigger.net | Original ↗ | .md | #web-security | #csp-bypass | #exfiltration
6.Redefining Impossible: XSS without arbitrary JavaScriptresearch | 2022-07-20 09:16 | portswigger.net | Original ↗ | .md | #web-security | #xss | #side-channel
7.Azure File Shares for Pentestersblog | 2020-07-16 00:00 | netspi.com | Original ↗ | .md | #cloud | #smb | #red-team