I hope you’ve been doing well! Improv Friends I had a somewhat bittersweet dinner with one of my (musical) improv comedy teams recently. We’ve been…
Here’s the uncomfortable part first: in August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks. No owner, no audit…
By default, Apple has a feature that allows all of their iOS devices to be assigned restrictions, so that employees and mostly children cannot access…
In my free time when I’m not hunting for bugs in paid programs, I like to contribute a bit to the open-source community and check…
When the adult website PornHub launched their public bug bounty program, I was pretty sure that most of the low hanging fruits of vulnerabilities would…
A common thing I see happening with many popular applications is that a developer will disable an HTML element through the “class” attribute. It usually…
I recently found a nice insecure direct object reference (IDOR) in New Relic which allowed me to pull data from other user accounts, and I…
This writeup walks you through the full process as to how I found a pretty bad Insecure Direct Object Reference (IDOR) in New Relic. In…
On May 14th, Lew Cirne, the CEO of New Relic, announced a new platform called New Relic One. The platform, featuring a fresh new design…
About four or five years ago, friend and fellow bug bounty hunter Sam Curry asked if I had “ever thought about what was possible to…
One way to think about the existential risk from AI is to realize that the less competent tend to end up relying on the more…
markdown --- name: Socrates description: Socratic tutor for students. Teaches by asking questions and never gives the answer or writes the deliverable. Use when a…
![[tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards](https://image.cybernoz.com/wp-content/uploads/2026/09/tldr-sec-346-Can-AI-Do-Novel-Security-Research-600x340.png)
