1.One-upmanship on sandbox escapes, record-breaking Patch Tuesdays, the next evolution in pentesting – OffSec roundup for CISOsresearch | 2026-08-14 06:39 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #pentesting
2.Rickrolling the World Cup, unleashing AI across Google, 0-click stored XSS on Next.js – ethical hacker roundupblog | 2026-07-21 08:36 | yeswehack.com | Original ↗ | .md | #ai-security | #vulnerability-research | #github
3.‘AI a force multiplier not a replacement’, small vs large models, the state of vibe-coded security – ethical hacker news roundupblog | 2026-05-15 14:29 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #llm
4.The Mythos moment, accelerating exploits, CVE Program under pressure – offsec roundup for CISOsblog | 2026-04-24 11:39 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #vulnerability-management
5.Notepad++ hijack, pwning Claude Code, top web hacking techniques of 2025 – ethical hacker news roundupblog | 2026-02-23 12:54 | yeswehack.com | Original ↗ | .md | #rce | #web3 | #claude-code
6.LLM bug hunters lack intuition, ‘security teams will consolidate visibility’ in 2026, EU Cyber Act vuln disclosure revisions – offsec roundup for CISOsblog | 2026-02-16 12:48 | yeswehack.com | Original ↗ | .md | #ai-security | #post-quantum | #vulnerability-disclosure
7.World Poker Tour and the Curry-Shah collab, in-flight exploits, does maths maketh the hunter? – ethical hacker news roundupblog | 2025-12-11 13:22 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #api-security
8.Cyber budgets still growing (but not fast enough), ‘AI and automation are operational imperatives’, the real-world impact of boosting Bug Bounty rewards – OffSec roundup for CISOsblog | 2025-11-10 13:50 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #microsoft
9.Why ‘HTTP/1.1 must die’, Intel exploits, C# Random hack with no maths – ethical hacker news roundupblog | 2025-10-03 10:52 | yeswehack.com | Original ↗ | .md | #bug-bounty | #http-desync | #responsible-disclosure
10.US court ruling on Uber breach slammed, red teamers cautious on AI, OffSec offers ‘strategic edge’ – OffSec roundup for CISOsblog | 2025-09-10 15:42 | yeswehack.com | Original ↗ | .md | #ai-security | #red-team | #responsible-disclosure
11.Nonce CSP bypass using disk cache, ‘quiet side channel’ for request smuggling, Amazon Q and the malicious pull request – ethical hacker news roundupblog | 2025-08-22 07:07 | yeswehack.com | Original ↗ | .md | #csp | #gemini-cli | #roundup
12.Chunked-body parsing flaws, making self-XSS great again, using HTTP redirect loops to achieve non-blind SSRFs – ethical hacker news roundupblog | 2025-07-09 08:14 | yeswehack.com | Original ↗ | .md | #cloud | #web-security | #ssrf
13.OpenAI VDP for bugs found by AI, CVE funding fears persist, ‘shift left’ towards vulnerability overload – OffSec roundup for CISOsvulnerability | 2025-06-30 08:21 | yeswehack.com | Original ↗ | .md | #ai-security | #vdp | #shift-left
14.Ultimate double-clickjacking exploit, novel HTTP/2 request tunnelling techniques, when encryption makes matters worse – ethical hacker news roundupblog | 2025-06-20 11:43 | yeswehack.com | Original ↗ | .md | #web-security | #http2 | #roundup
15.DOMPurify bypasses, prompt injecting ChatGPT to shell, AI fuzz finds – ethical hacker news roundupblog | 2024-12-16 14:36 | CVE-2024-9143 | yeswehack.com | Original ↗ | .md | #ai-security | #prompt-injection | #llm-security
16.Clock ticking on Cyber Resilience Act compliance, Bug Bounty forecasts, intriguing CISA red team find – OffSec roundup for CISOsblog | 2024-12-09 11:33 | yeswehack.com | Original ↗ | .md | #bug-bounty | #cisa | #compliance
17.New tool for finding mutated XSS, $20k Chromium sandbox escape, Live bug bounty results from Ekoparty – ethical hacker news roundupresearch | 2024-11-18 14:02 | yeswehack.com | Original ↗ | .md | #bug-bounty | #php | #sandbox-escape
18.NIS 2 in force, Cyber Resilience Act adopted, CISA hails VDP impact – OffSec roundup for CISOsblog | 2024-11-11 08:36 | yeswehack.com | Original ↗ | .md | #bug-bounty | #compliance | #vdp
19.Tackling tech sprawl, CISO burnout, NIS 2 now enforceable – OffSec roundup for CISOsblog | 2024-10-18 10:13 | yeswehack.com | Original ↗ | .md | #supply-chain | #vdp | #nis2
20.Partial SolarWinds reprieve, CrowdStrike lessons, LLM kryptonite – OffSec roundup for CISOsblog | 2024-10-16 15:00 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #supply-chain
21.Web timing attacks, Apache HTTP confusion attacks, email parsing discrepancies – ethical hacker news roundupresearch | 2024-09-30 15:25 | yeswehack.com | Original ↗ | .md | #rce | #web-security | #apache
22.NIS 2 in brief, security tech hype cycle, Italy’s first ever live Bug Bounty – OffSec roundup for CISOsblog | 2024-09-20 12:41 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #interview
23.ORM leaks, CSRF is alive, lockpicking lessons – ethical hacker news roundupblog | 2024-08-14 13:56 | yeswehack.com | Original ↗ | .md | #web-security | #path-traversal | #csrf
24.Sam Curry modem masterclass, PHP threat to Windows Servers, Calls for AI safety Bug Bounties – ethical hacker news roundupblog | 2024-07-09 13:33 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #rce
25.Apple declines to pay Kaspersky vuln reward, Bug Bounty ‘extortion’ dispute, Microsoft Recall backlash – OffSec roundup for CISOsblog | 2024-07-02 13:06 | yeswehack.com | Original ↗ | .md | #bug-bounty | #cloud | #apple
26.Taking Home Gold: The Best InfoSec Talks & Research of the Yearresearch | 2022-01-04 00:00 | bishopfox.com | Original ↗ | .md | #vulnerability | #security-research | #year-in-review
27.Infosec Talks You May Have Missed This Yearblog | 2020-12-18 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #def-con | #ssrf
28.The Pen Testing Tools We’re Thankful for in 2020blog | 2020-11-23 00:00 | bishopfox.com | Original ↗ | .md | #open-source | #osint | #penetration-testing
29.Project Zero Patch Tuesday roundup, November 2014blog | 2014-11-19 00:00 | projectzero.google | Original ↗ | .md | #microsoft | #vulnerability-disclosure | #patch-tuesday