A comprehensive collection of security research, frameworks, and methodologies developed over two decades in information security, covering assessment types, threat modeling, web application security, and…
Here’s why I think VCs, as a species, are in serious trouble right now. The primary reason VCs were needed was that it was usually…
Ok all, I have a video I’m going to ask everyone to go and watch within like 72 hours. This is from a guy named…
Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring: A common (yet unknown) SSRF attack vector in Next.js Middleware Exploiting…
I hope you’ve been doing well! Endless Fire Drills HugOps to everyone who has been on call responding to the basically weekly announcement of new…
APIs are a blessing and a curse. They’re the backbone of the modern internet. They also expose complex behaviors that are often poorly documented, stitched…
What if we told you that our newly released API Scanner has 922 quintillion payloads for a single type of vulnerability test? A quintillion is…
A step-by-step tutorial to install Crystal and create, run, test, and build your first project using shards. Getting started with Crystal is quick if you…
WebAssembly is a low-level assembly language that can process binary formats on the web. It runs on the web but feels like native execution, and…
Amelia Coen | 12 September 2025 at 12:21 UTC Arman S., a full-time independent security researcher and bug bounty hunter, talked us through how he…
Amelia Coen | 12 September 2025 at 12:21 UTC Arman S., a full-time independent security researcher and bug bounty hunter, talked us through how he…
AI auto-generating exploits from CVEs for $3, not actually but Memory Integrity Enforcement makes it harder, surprisingly NPM packages were backdoored I hope you’ve been…
![[tl;dr sec] #297 - Self-Propagating NPM Malware, Securely Deploying AI Agents, China's Great Firewall Leaked](https://image.cybernoz.com/wp-content/uploads/2025/09/tldr-sec-297-Self-Propagating-NPM-Malware-Securely-Deploying-AI.png)
![[tl;dr sec] #296 - AI Automates CVE -> Exploit, Apple Defeats Memory Corruption, Moar NPM Backdoors](https://image.cybernoz.com/wp-content/uploads/2025/09/tldr-sec-296-AI-Automates-CVE-Exploit-Apple.png)