Curated security research, vulnerabilities, advisories and tools for practitioners.

Topics

Browse curated security coverage by topic and technology tag.

#bug-bounty 1886#ai-security 1478#cloud 962#vulnerability-research 873#bugcrowd 806#hackerone 781#rce 581#cloud-security 577#supply-chain 412#web-security 412#community 410#compliance 402#vulnerability-management 366#active-directory 357#pentesting 348#appsec 340#vulnerability 324#web3 323#penetration-testing 301#open-source 295#burp-suite 294#vulnerability-disclosure 294#reverse-engineering 287#red-team 267#threat-intelligence 248#interview 241#devsecops 239#portswigger 237#privilege-escalation 233#llm 232#automation 223#windows 221#xss 219#trail-of-bits 210#research 207#ctf 201#best-practices 196#crowdsourced-security 189#cryptography 186#attack-surface 181#blockchain 178#wiz 172#risk-management 170#tooling 165#ciso 164#android 163#jfrog 159#ai-agents 153#exploitation 153#phishing 153#incident-response 152#exploit 150#zero-day 149#malware 145#cve 144#hackenproof 143#project-zero 142#kali-linux 139#case-study 138#fuzzing 138#code-review 137#policy 136#yeswehack 136#vdp 132#agentic-ai 131#gitlab 128#ransomware 128#offensive-security 127#product-update 127#aws 126#mobile-security 123#career 121#sql-injection 119#smart-contracts 116#security-research 111#triage 110#security-testing 109#conference 108#authentication 107#google 107#pentest 106#static-analysis 106#hardware-security 105#apt 104#aikido 102#detection 100#privacy 100#ssrf 100#regulation 99#owasp 97#application-security 96#ci-cd 96#ios 95#security 95#remediation 94#mcp 93#governance 92#social-engineering 91#linux 90#release-notes 90#prompt-injection 89#training 89#api-security 86#javascript 86#identity-security 85#government 84#azure 83#access-control 82#devops 82#tutorial 81#continuous-testing 80#threat-hunting 80#program-management 79#npm 77#announcement 76#cybersecurity 76#education 76#kubernetes 76#misconfiguration 76#audit 75#kernel 75#methodology 73#sast 73#supply-chain-security 73#eshard 72#jfrog-com 72#partnership 72#integration 71#benchmark 70#python 70#software-security 70#microsoft 69#report 67#sdlc 67#security-program 67#github 66#leaderboard 66#attack-surface-management 65#red-teaming 65#php 64#ai-pentesting 63#ethical-hacking 63#exposure-management 62#security-strategy 62#hacker-spotlight 61#advisory 60#container-security 60#credential-theft 60#researcher-rewards 60#secure-coding 60#security-tools 60#data-breach 59#defense 59#poc 59#reconnaissance 59#c2 58#defi 58#iot 58#machine-learning 58#company-news 57#dojo 57#osint 57#semperis 57#side-channel 57#black-hat 56#healthcare 56#threat-detection 56#patching 55#podcast 55#ctem 54#entra-id 54#ethiack 54#network-security 54#path-traversal 54#hall-of-fame 53#tools 53#firmware 52#guide 51#leadership 51#crowdstrike 50#def-con 50#llm-security 50#llvm 50#news-roundup 50#security-audit 50#authentication-bypass 49#company-culture 49#data-exposure 49#deserialization 49#powershell 49#threat-landscape 49#workflow 49#ai-governance 48#dualdefense 48#financial-services 48#hardening 48#apple 47#browser-security 47#ptaas 47#security-operations 47