31.[EN] Flow to Shell: Achieving RCE in Node-RED Through Misconfigurationresearch | 2026-02-13 17:40 | yokai.hakaisecurity.io | Original ↗ | .md | #rce | #vulnerability-research | #research
32.[PT-BR] Flow to Shell: Achieving RCE in Node-RED Through Misconfigurationresearch | 2026-02-13 17:40 | yokai.hakaisecurity.io | Original ↗ | .md | #rce | #vulnerability-research | #research
33.Breaking AppSec Myths – Obfuscated Packagesresearch | 2026-02-04 14:16 | jfrog.com | Original ↗ | .md | #supply-chain | #appsec | #obfuscation
34.[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofingresearch | 2026-02-04 11:59 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research
35.[PT-BR] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofingresearch | 2026-02-04 11:59 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research
36.Parse and Parse: MIME Validation Bypass to XSS via Parser Differentialresearch | 2026-01-30 00:00 | lab.ctbb.show | Original ↗ | .md | #web-security | #xss | #research
37.CVE-2026-24061: Execução remota de código no Telnetd - análise técnica e prova de conceitovulnerability | 2026-01-27 11:54 | CVE-2026-24061 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research
38.The Year in Wiz Research: 2025 Most Read Blogsblog | 2026-01-30 13:00 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #supply-chain
39.Top 10 web hacking techniques of 2025: call for nominationsresearch | 2026-01-16 14:11 | portswigger.net | Original ↗ | .md | #vulnerability-research | #web-security | #community
40.[EN] A Deep Dive into KeyTabExtractor Techniquesresearch | 2026-01-15 18:10 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #kerberos | #research
41.Dissecting and Exploiting CVE-2025-62507: Remote Code Execution in Redisresearch | 2026-01-14 14:09 | CVE-2025-62507 | jfrog.com | Original ↗ | .md | #rce | #exploit | #cve
42.Gotta cache 'em all: bending the rules of web cache exploitationresearch | 2026-01-08 12:21 | portswigger.net | Original ↗ | .md | #vulnerability-research | #web-security | #research
43.Stanford’s Test Proves the Point: Agentic AI Is Transforming Offensive Security, but Real Defense Still Requires a Hybrid of AI and Human Expertiseblog | 2025-12-17 17:14 | hackerone.com | Original ↗ | .md | #ai-security | #agentic-ai | #offensive-security
44.Welcome to the new Project Zero Blogresearch | 2025-12-16 00:00 | projectzero.google | Original ↗ | .md | #community | #research | #blog
45.[PT-BR] N8Naked: exploring security misconfigurations in N8Nresearch | 2025-12-11 22:06 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research
46.[EN] N8Naked: exploring security misconfigurations in N8Nresearch | 2025-12-11 22:05 | yokai.hakaisecurity.io | Original ↗ | .md | #ai-security | #vulnerability-research | #research
47.HTTP/1.1 must die: the desync endgameresearch | 2025-10-17 10:13 | portswigger.net | Original ↗ | .md | #http-desync | #request-smuggling | #cloudflare
48.The minefield between syntaxes: exploiting syntax confusions in the wildblog | 2025-10-17 11:30 | yeswehack.com | Original ↗ | .md | #bug-bounty | #arbitrary-file-read | #research
49.I Analysed Over 3 Million Exposed Databases Using Netlasblog | 2025-10-10 00:00 | netlas.io | Original ↗ | .md | #data-exposure | #research | #mongodb
50.Who Scans the Scanner? Exploiting Trend Micro Mobile Securityresearch | 2025-09-10 19:56 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #xss | #research
51.A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USAresearch | 2025-09-03 07:38 | portswigger.net | Original ↗ | .md | #black-hat | #conference | #research
52.Government Cybersecurity Leaders Embrace Crowdsourcing, But Must Commit to AI Defenseblog | 2025-08-29 17:32 | hackerone.com | Original ↗ | .md | #ai-security | #bug-bounty | #research
53.Agents Built From Alloysvulnerability | 2025-07-17 12:00 | xbow.com | Original ↗ | .md | #ai-security | #agentic-ai | #benchmark
54.RCE via Pacotes MKP no Checkmk - Execução Remota de Comandos via Interface Webvulnerability | 2025-07-03 17:28 | CVE-2024-22116 | yokai.hakaisecurity.io | Original ↗ | .md | #rce | #vulnerability-research | #research
55.Behind the Bug: Logic Error in Roundcube Session Parser [CVE-2025-49113]vulnerability | 2025-06-10 18:22 | CVE-2025-49113 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research
56.The Windows Registry Adventure #7: Attack surface analysisblog | 2025-05-23 00:00 | projectzero.google | Original ↗ | .md | #attack-surface | #fuzzing | #windows
57.Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messagesblog | 2025-05-09 00:00 | projectzero.google | Original ↗ | .md | #fuzzing | #macos | #kernel
58.What Analyzing Hundreds of Thousands of Cloud Environments Taught Us About Data Exposureblog | 2025-05-07 12:00 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #data-security
59.Research Briefing: MCP Securityblog | 2025-04-17 14:00 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #cloud-security
60.The Windows Registry Adventure #6: Kernel-mode objectsblog | 2025-04-16 00:00 | projectzero.google | Original ↗ | .md | #attack-surface | #windows | #vulnerability