Research and Development

Security Research Proof of Concept Security Patches Cisco Talos AI Safety Protocols Security Tools Incentives Infosec Community Security Conferences Vulnerability Discovery Threat Monitoring SafeBreach Security Researchers Technical Write-ups AI Tools

3 ARTICLES

2mo ago

PortSwigger Shows How CSS in Emails Can Break Webmail Boundaries and Steal Tokens

The research matters because simple styling can be used to trick webmail interfaces and connected AI tools, creating new paths for credential and token theft.

9 ARTICLES

2mo ago

Apple Caps Bug Reports After Surge of AI-Generated Submissions

5 ARTICLES

4mo ago

Critical Cisco Unified CM SSRF Is Being Exploited

5 ARTICLES

4mo ago

Google Says It Has Blocked Notification Attack That Could Hijack Gemini on Android

9 ARTICLES

5mo ago

Researcher Publishes YellowKey BitLocker Bypass and GreenPlasma Windows Exploit PoCs

4 ARTICLES

6mo ago

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

21 ARTICLES

last yr.

Apple Doubles Top Security Bounty to $2 Million and Unveils Verifiable Target Flags

Research and Development

PortSwigger Shows How CSS in Emails Can Break Webmail Boundaries and Steal Tokens

Apple Caps Bug Reports After Surge of AI-Generated Submissions

Critical Cisco Unified CM SSRF Is Being Exploited

Google Says It Has Blocked Notification Attack That Could Hijack Gemini on Android

Researcher Publishes YellowKey BitLocker Bypass and GreenPlasma Windows Exploit PoCs

Researchers Confirm 10 Live Indirect Prompt Injections Targeting AI Agents

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

CISA Warns VMware vCenter Flaw Is Under Attack, Sets Federal Patch Deadline

Fake GitHub Exploits Are Installing Webrat, Security Firms Warn

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Apple Doubles Top Security Bounty to $2 Million and Unveils Verifiable Target Flags