The Art of Agentic Coding
The coding paradigm is rapidly changing with AI. I’ve heard the term ‘Vibe Coding’ being thrown around, but honestly, I’m not quite sure what to…
Category: Mix
Intigriti Bug Bytes #225 – June 2025
Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring: Becoming an Intigriti Pentester Exploiting CORS in 2025 (even when SameSite…
Two months of Burp AI: empowering security testers with the future of AppSec | Blog
Amelia Coen | 13 June 2025 at 13:51 UTC It’s been a whirlwind two months since AI-powered features landed in Burp Suite Professional. Thousands of…
![[tl;dr sec] #283 - Awesome Black Hat Tools, Evading EDR, Disrupting Malicious Uses of AI](https://image.cybernoz.com/wp-content/uploads/2025/06/tldr-sec-283-Awesome-Black-Hat-Tools-Evading-EDR.png)
[tl;dr sec] #283 – Awesome Black Hat Tools, Evading EDR, Disrupting Malicious Uses of AI
Huge list of tools presented at various Black Hat conferences, how attackers evade modern EDR, OpenAI’s report on threat actor campaigns they’ve disrupted I hope…
Rick Bohm on AI, Collaboration & API Security Future
Nestled in a log cabin high in the Rocky Mountains, Rick Bohm starts his day the same way he’s approached his career: intentionally, with a…
Security maturity, complexity, and bug bounty program effectiveness: A deep dive
There are three key elements that, when combined, support the planning of a bug bounty program to attract the right researchers. These three components are…
Why Google I/O Scared This 2007 Apple Fanboy for the First Time
As an Apple Fanboy going back to 2007, this is the first year I’ve felt fear for Apple’s future. And after just watching Apple’s WWDC…
This Is How They Tell Me Bug Bounty Ends · Joseph Thacker
An AI agent will soon be able to find all the vulnerabilities in any application. Or that’s what they say. We’ll have no need for…
Hive Five 227 – Developers, Developers, Developers.
I made two new musical discoveries this week: Acid Bath and Ryo Fukui, exploring swamp metal and jazz. I also attempted to fix our broken…
The Chinese Room Problem With the ‘LLMs only predict the next token’ Argument
I’m sure you’ve heard the argument that LLMs aren’t really thinking because, according to them, LLMs are just predicting the next token… And that output…
Jwt-Hack: Reborn in Rust | HAHWUL
jwt-hack v2 is a complete Rust rewrite, boosting performance, safety, and stability. Back in October 2020, I created a tool called jwt-hack to make security…
DevSecOps | HAHWUL
Roadmap for everyone who wants DevSecOps DevSecOps is a culture and practice that aims to integrate security into every phase of the software development lifecycle…