Curated security research, vulnerabilities, advisories and tools for practitioners.

#exfiltration

Security coverage tagged exfiltration.

1.

Multiple JetBrains IDE plugins caught stealing AI keys

blog | 2026-06-16 00:00 | aikido.dev | original ↗ | #ai-security | #supply-chain | #malware

2.

Inline Style Exfiltration: leaking data with chained CSS conditionals

research | 2025-08-27 07:35 | portswigger.net | original ↗ | #chromium | #exfiltration | #css

3.

Another Byte Bites the Dust - How XBOW Turned a Blind SSRF into a File Reading Oracle

vulnerability | Critical | 2025-07-28 12:00 | xbow.com | original ↗ | #vulnerability-research | #ssrf | #exfiltration

4.

Stealing HttpOnly cookies with the cookie sandwich technique

research | 2025-06-30 16:01 | portswigger.net | original ↗ | #cookies | #exfiltration | #session-security

5.

Blind CSS Exfiltration: exfiltrate unknown web pages

research | 2024-07-11 10:09 | portswigger.net | original ↗ | #web-security | #csp-bypass | #exfiltration

6.

Redefining Impossible: XSS without arbitrary JavaScript

research | 2022-07-20 09:16 | portswigger.net | original ↗ | #web-security | #xss | #side-channel