Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 16)

451.

Emulating an iPhone in QEMU - Part II

research | 2025-06-04 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ios | #software-security

452.

A deep dive into Axiom’s Halo2 circuits

research | 2025-05-30 11:00 | blog.trailofbits.com | Original ↗ | .md | #web3 | #cryptography | #audit

453.

Revisiting COM Hijacking

research | 2025-05-28 16:21 | specterops.io | Original ↗ | .md

454.

Inside Security@ Dallas: Insights to Attract Elite Researchers and Prove ROI

research | 2025-05-21 13:28 | hackerone.com | Original ↗ | .md | #bug-bounty | #case-study | #hackerone

455.

Defenda sua casa: modelagem de ameaças no mundo real – parte 2 de 3

research | 2025-05-19 15:33 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

456.

Defend your home: Real-world Threat Modeling – Part 2 of 3

research | 2025-05-19 14:44 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

457.

WinDBG TTD Limitations: Scaling Up to Full-System Time Travel Analysis

research | 2025-05-19 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

458.

Network Segmentation Testing Guide

research | 2025-05-06 07:30 | projectblack.io | Original ↗ | .md | #compliance | #penetration-testing | #pci-dss

459.

Drag and Pwnd: Leverage ASCII characters to exploit VS Code

research | 2025-05-01 12:27 | portswigger.net | Original ↗ | .md | #command-injection | #terminal | #vs-code

460.

Using AI to find web app vulnerabilities: hacking expert John Hammond takes Burp AI for a spin

research | 2025-04-30 13:23 | portswigger.net | Original ↗ | .md | #ai-security | #false-positives | #portswigger

461.

Vibe Hacking: Finding Auth Bypass and RCE in Open Game Panel

research | 2025-04-30 05:52 | CVE-2025-15586 | projectblack.io | Original ↗ | .md | #rce | #authentication-bypass | #open-game-panel

462.

How to Identify Phishing Scams

research | 2025-04-28 23:00 | theori.io | Original ↗ | .md | #email-security | #phishing | #social-engineering

463.

ProxyBlobing into your network

research | 2025-04-28 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #red-team | #proxy

464.

Document My Pentest: you hack, the AI writes it up!

research | 2025-04-24 08:41 | portswigger.net | Original ↗ | .md | #ai-security | #pentesting | #burp-suite

465.

Code Assisted Penetration Testing

research | 2025-04-24 00:08 | projectblack.io | Original ↗ | .md | #jwt | #penetration-testing | #methodology

466.

Nessus Reporting Customisation & Analysis

research | 2025-04-23 09:54 | projectblack.io | Original ↗ | .md | #vulnerability-management | #reporting | #tooling

467.

Auditing Moodle's core hunting for logical bugs

research | 2025-04-21 22:00 | blog.quarkslab.com | Original ↗ | .md | #php | #vulnerability | #pentest

468.

Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

research | 2025-04-22 12:31 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

469.

Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research

research | 2025-04-11 00:00 | bishopfox.com | Original ↗ | .md | #ai-security | #vulnerability-management | #cve

470.

How I choose a security research topic

research | 2025-04-10 08:27 | portswigger.net | Original ↗ | .md | #web-security | #security-research | #methodology

471.

Malicious MSI – Tornando o MSI em uma arma

research | 2025-04-11 16:08 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #research

472.

Security audit of PHP-SRC

research | 2025-04-09 22:00 | blog.quarkslab.com | Original ↗ | .md | #fuzzing | #php | #audit

473.

A small bug in the signature verification of AOSP OTA packages

research | 2025-04-07 22:00 | blog.quarkslab.com | Original ↗ | .md | #android | #vulnerability | #aosp

474.

A look back at Insomni’hack 2025

research | 2025-04-09 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #android

475.

Emulating an iPhone in QEMU - Part I

research | 2025-04-04 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ios | #software-security

476.

How Security Researchers and Bug Bounty Programs Can Build Lasting Partnerships

research | 2025-04-01 14:50 | hackerone.com | Original ↗ | .md | #bug-bounty | #best-practices | #program-management

477.

SAML roulette: the hacker always wins

research | 2025-03-31 07:10 | portswigger.net | Original ↗ | .md | #gitlab | #authentication-bypass | #xml

478.

Loose Types Sink Ships: Pre-Authentication SQL Injection in Halo ITSM

research | 2025-04-02 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #sql-injection

479.

GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically

research | 2025-04-01 09:37 | volexity.com | Original ↗ | .md | #vulnerability-research | #open-source | #threat-intelligence

480.

Launching Aikido Malware – Open Source Threat Feed

research | 2025-03-31 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #open-source

← Previous More →