Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 9)

241.

Tearing down a car telematic unit (and finding an accident on Facebook)

research | 2026-04-08 22:00 | blog.quarkslab.com | Original ↗ | .md | #hardware-security | #osint | #automotive

242.

Milking the last drop of Intego - Time for Windows to get its LPE

research | 2026-04-06 22:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #windows-security

243.

Evolving with AI: How One Security Researcher Built a Career Around Time

research | 2026-04-07 13:39 | hackerone.com | Original ↗ | .md | #ai-security | #bug-bounty | #career

244.

Aikido Attack finds multiple 0-days in Hoppscotch

research | 2026-04-08 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #zero-day | #account-takeover

245.

Discovering a 0-Day in Zero Day

research | 2026-04-08 00:00 | calif.io | Original ↗ | .md | #zero-day | #vulnerability-research | #humor

246.

Claude Found an Auth Bypass in NSA's Ghidra Server

research | 2026-04-08 00:00 | calif.io | Original ↗ | .md | #ai-security | #vulnerability-research | #ghidra

247.

Fixing ESC8 - Web Enrollment is enabled over HTTP and HTTPS, and Channel Binding is disabled

research | 2026-04-06 10:59 | projectblack.io | Original ↗ | .md | #ai-security | #active-directory | #hardening

248.

Machine Learning for Vulnerability Discovery

research | 2026-04-03 12:00 | xbow.com | Original ↗ | .md | #ai-security | #appsec | #vulnerability-discovery

249.

Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW

research | 2026-04-02 04:00 | xbow.com | Original ↗ | .md | #ai-security | #cloud | #rce

250.

SightHouse: Automated function identification

research | 2026-04-01 22:00 | blog.quarkslab.com | Original ↗ | .md | #open-source | #reverse-engineering | #program-analysis

251.

How to Find XSS: Techniques Security Researchers Use in Real Environments

research | 2026-04-01 16:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #pentesting | #web-security

252.

The Dot-Dot-Slash That Frameworks Hand You: CSPT Across Every Major Frontend Framework

research | 2026-04-02 00:00 | lab.ctbb.show | Original ↗ | .md | #path-traversal | #cspt | #frontend

253.

Training State of the Art Vulnerability Discovery Agents through Reinforcement Learning

research | 2026-03-31 00:00 | depthfirst.com | Original ↗ | .md | #web3 | #smart-contracts | #vulnerability-detection

254.

QBDI vs TritonDSE against a VM: who will be the fastest?

research | 2026-03-30 22:00 | blog.quarkslab.com | Original ↗ | .md | #ctf | #reverse-engineering | #binary-analysis

255.

Patch gap to mobile renderer RCE: pwning Samsung Internet’s V8 on the Galaxy S25

research | 2026-04-01 12:00 | CVE-2025-10891 | osec.io | Original ↗ | .md | #rce | #xss | #mobile-security

256.

[CVE-2026-0899] CHECK Removed, Context Confused, Checkmate Achieved

research | 2026-04-01 00:00 | CVE-2026-0899 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #v8 | #chrome

257.

The Wiz Blue Agent, now Generally Available

research | 2026-03-30 13:16 | wiz.io | Original ↗ | .md | #incident-response | #ai-agents | #secops

258.

vim vs emacs vs Claude

research | 2026-03-30 00:00 | calif.io | Original ↗ | .md | #ai-security | #rce | #vulnerability-research

259.

In WAF we (should not) trust

research | 2026-03-25 23:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #web-security | #command-obfuscation

260.

Magento PolyShell - Unauthenticated File Upload to RCE in Magento (APSB25-94)

research | 2026-03-26 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research

261.

Business, logic, and chains: unauthenticated RCE in Dell Wyse Management Suite

research | 2026-03-23 13:37 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #business-logic | #exploit-chain

262.

research | 2026-03-24 14:51 | blog.sentry.security | Original ↗ | .md | #ai-security | #security-culture | #llm

263.

The Practitioner’s Guide to AI-Enhanced Hacking

research | 2026-03-24 00:00 | caido.io | Original ↗ | .md | #ai-security | #mcp | #caido

264.

Introducing Wiz Agents & Workflows: Security at the Speed of AI

research | 2026-03-23 12:00 | wiz.io | Original ↗ | .md | #ai-security | #automation | #red-team

265.

Intego X9: Never trust my updates

research | 2026-03-19 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #macos

266.

Um caractere para o Account Takeover

research | 2026-03-20 20:08 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #account-takeover | #research

267.

Australia Wide Internal & Wireless Network Penetration Testing

research | 2026-03-19 07:09 | projectblack.io | Original ↗ | .md | #pentesting | #penetration-testing | #wireless

268.

Claude Code Hacking Skills Video

research | 2026-03-20 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #claude-code | #offensive-security

269.

Hyoketsu - Solving the Vendor Dependency Problem in RE

research | 2026-03-18 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research

270.

From virtio-snd 0-day to hypervisor escape: exploiting QEMU with an uncontrolled heap overflow

research | 2026-03-17 12:00 | osec.io | Original ↗ | .md | #zero-day | #exploit | #heap-overflow

← Previous More →