Vulnerabilities I’ve Found: The Fun, the Weird and the Technical | Roni Carta
Source link
Related Articles
All Mix →![[tl;dr sec] #296 - AI Automates CVE -> Exploit, Apple Defeats Memory Corruption, Moar NPM Backdoors](https://image.cybernoz.com/wp-content/uploads/2025/09/tldr-sec-296-AI-Automates-CVE-Exploit-Apple.png)
[tl;dr sec] #296 – AI Automates CVE -> Exploit, Apple Defeats Memory Corruption, Moar NPM Backdoors
Table of Contents AI auto-generating exploits from CVEs for $3, not actually but Memory Integrity Enforcement makes it harder, surprisingly NPM packages were backdoored Bardcore…
Do not dismiss the small vulnerabilities!
Table of Contents How vulnerabilities can be combined Example 1 Example 2 Example 3 Example 4 Automation Never dismiss a small vulnerability because its impact…
The Hidden Risks Lurking in Your Business Logic
Table of Contents Challenging the Myth of Secure Internal APIs The Risks of Vulnerable Business APIs Proactive Strategies for Securing Business APIs Protection from Business…
The Mexican Immigration Solution: Make U.S. Immigration Policy Match Mexico’s
So perhaps you’ve heard the story of evil America trying to enact a draconian immigration policy towards Mexico. It’s the policy that does things like:…
Thousands of vulnerable Magento web stores out there
We checked 30,000 Magento stores for three publicly available vulnerabilities that are sometimes found in older Magento installations. Despite the most recent of the three…
Security Update: Publicly Exposed Ingress NGINX Admission
Table of Contents Affected Products Vulnerability Details Detection Mitigation Patch availability References: A series of vulnerabilities, known as IngressNightmare (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974), have been…