Aser Ahmed·2d agoI Found a 9.8 Critical Integer Overflow in Google’s TensorFlow. Google Refused to Pay Me.
Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]·4d agoYour Machines Are Still Calling Domains Nobody OwnsPopcorn Time’s abandoned updater pinged unregistered domains from millions of PCs. Here’s how to find the same ghost in your own fleet…
Burrito·4d agoThe Bouncer Who Only Read IPv4: SSRF in WordPress Playground’s CORS ProxyAn errand-boy proxy, a split-personality hostname, and a delivery to the proxy’s own mailroom.A response icon1A response icon1
Burrito·4d agoThe Password Was in the JSON: A WordPress REST API Access-Control Bug in Secure Custom FieldsSCF 6.9.6 checked whether a referenced post was readable — but not whether its password-protected content was. In affected configurations…A response icon1A response icon1
Amiltha·Nov 1Spooky Bug Tales: A Halloween special blog on seemingly paranormal tech bugsIn this piece, I have compiled some spooky tech bugs that i came across which would have definitely creeped me out if I encountered them in…A response icon1A response icon1
Nathansb·Oct 26From Medium Integrity to SYSTEM on Windows 11My October 26 lab test and the MSRC outcome
Sarthak Chauhan·Oct 25Container Containment is a Hypothesis: Empirical Verification in Vulnerability ResearchSeparating sandbox configuration, runtime evidence, and defensible security claims.
Mahmoud Matar·Oct 25Designing an MCP-Based Security Lab for Agentic Security ResearchConnecting Codex, Kali Linux, and REMnux to orchestrate security researching workflows.
![Aeon Flex, Elriel Assoc. 2133 [NEON MAXIMA]](https://miro.medium.com/v2/resize:fill:40:40/1*ewo3-1c0qY57bCDWa3tdUA.png){kind=small}
