Why Aren’t Things Worse? | Daniel Miessler
One of the things I’ve been thinking about for years, but more acutely now because of the conversations around controlling open source models, is the…
Category: Mix
Intigriti named new provider for Adobe’s Bug Bounty Program
Adobe empowers everyone to create through industry-leading platforms and tools that unleash creativity, productivity, and personalized customer experiences. Starting September 1, 2026, Intigriti will be…
Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years | Blog
Andrzej Matykiewicz | Tuesday, 4 August 2026 at 14:45 UTC “It feels like I get 10X the productivity on an engagement. The difference is night…
AIL Badges | Daniel Miessler
AI Influence Level has been a text label since 2023. A line at the bottom of a post saying how much of it I wrote…
The AI-Native Company | Daniel Miessler
Heading into Black Hat / DEF CON this week I think the biggest idea in tech right now isn’t the attacker vs. defender question as…
Intigriti Bug Bytes #238 – July 2026
Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring: Intigriti turns 10! RCE in GitHub.com and GitHub Enterprise Server…
What the Singularity Actually Means
The word singularity gets thrown around constantly right now. Most of the people using it would struggle to tell you what it means. It gets…
How to appeal a bug bounty submission
Bug bounty is a collaborative process that involves multiple parties, including the security researcher, triage team, and the affected organization managing the bug bounty program.…
From capable AI models to trusted security testing | Blog
Kieron Hughes | Thursday, 30 July 2026 at 14:58 UTC This week, we launched Burp AT in public beta for Burp Suite Professional users. Next…
![[tl;dr sec] #339 - Hugging Face's Incident Report, Context Bombs, AI does Cryptanalysis](https://image.cybernoz.com/wp-content/uploads/2026/07/tldr-sec-339-Hugging-Faces-Incident-Report-Context-Bombs-600x340.png)
[tl;dr sec] #339 – Hugging Face’s Incident Report, Context Bombs, AI does Cryptanalysis
Hacker Summer Camp I’m excited about Black Hat and DEF CON next week! It’s always such a delight to catch up with friends and meet…
The Answer to the Harness Question
Martin Casado posted something about AI harnesses that captures where a lot of smart people are stuck right now. On harnesses, I vacillate between three…
RAG and ruin: why your existing controls may miss AI poisoning attacks
RAG systems expand the application’s trust boundary by adding external, mutable content to the model context. If a threat actor can influence what gets indexed…