07:50
Medium11 articles
Medium daily digest · 11 articles
All Updates
Saturday, October 3, 2026 · Bug Bounty news feed snapshots · with LLM summaries
Sat, October 3
Fri, October 2
22:36
LiveOverflow@LiveOverflowYouTube
OpenAI Hacked with a 1-Year-Old Bug
How could OpenAI be hacked with a vulnerability that had already been fixed for a year? Follow the dependency chain from Discourse through ImageMagick, libheif, and Debian to see why security fixes can take so long to reach the applications that depend on them. SPONSOR This video is sponsored by Hextree.io, our cybersecurity learning platform. Join the Hextree Discord: https://discord.gg/xgQpCQCpvy RESOURCES Previous video, How OpenAI got hacked with an image: https://www.youtube.com/watch?v=gjHh9g7yo9Y Harsh on X: https://x.com/rootxharsh xkcd, Dependency: https://xkcd.com/2347/ Per video:…
07:50
Thu, October 1
23:26
Lonely__MH@Lonely__MHPick
The post by @Lonely__MH recommends two open-source models for local deployment: Qwen Image 2.1 for image generation, which the author claims natively supports NSFW content, and MiniMax H3 for video generation, noting that uncensored community versions are widely available. The author's key finding is that combining these two models allows users to generate any content they want without content restrictions ("do whatever you want"). The post effectively highlights how easily safety guardrails can be bypassed via community fine-tunes of open-weight models.t.co/BYyM6V6jNB22:52
bojie_li@bojie_liPick
The author, Bojie Li, released an open-source CLI tool called "greenbubbles" that lets AI agents connect directly to the WeChat desktop client's database and access chat history in real time. Rather than copying and re-exporting the database (as most existing tools do), greenbubbles uses a component called greenbubbles-acquire to extract the database password and connect directly, since WeChat's native database schema works well. He also open-sourced a skill for organizing chat records into a large personal knowledge base covering all aspects of his life and work, noting the data is so sensitive he dare not screenshot it. The project has already gained 78 stars on GitHub.t.co/Eohbca7jP017:00
Critical Thinking 播客
Episode 194: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph cover Faav’s Microsoft hack, Salesforce adjusting their scope, and if/how Jev can be used for Bug Bounty Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the awesome intro music! ====== Links ====== Follow your hosts Rhynorater, rez0 and gr3pme on X: https://x
13:15
LinearUncle@LinearUnclePick
The author was skeptical of Anthropic's claim that Zhipu's GLM-5.3 model has strong cyberattack capabilities, so they decided to test it themselves. After searching, they found an online API provider offering an "abliterated" version of the model with its safety layer removed. They plan to practice red teaming and security skills against their own website.t.co/JPCSANWB3k07:50
Medium6 articles
Medium daily digest · 6 articles
Wed, September 30
23:31
17:03
HappyQQ_AI@HappyQQ_AIPick
The author (@HappyQQ_AI) shares a prompt that they found useful for cybersecurity work, noting it was extracted from an open-source security software project (link via t.co). No specific CVE IDs or product names are mentioned in the post itself. The key finding is simply that this prompt may be valuable to security professionals.t.co/kDcllhk18i16:37
Aituglo
OpenAI just doubled the price of the plan we all rely on, and the others will follow. This week: what the Codex price hike means, where I think bug bounty is heading as models get expensive, and why I started vlogging my weeks.
07:50
Medium7 articles
Medium daily digest · 7 articles
Tue, September 29
21:55
watchTowr Labs
Part 1 of this week's saga can be found here. This research is a glimpse into the capabilities that power our Preemptive Exposure Management solution, enabling organizations to rapidly react to emerging threats: the  watchTowr Platform. What Is A Citrix NetScaler? NetScaler, from Citrix (now under Cloud
11:17
ai_fengshou@ai_fengshouPick
GitHub has officially open-sourced an AI security agent, which in real-world testing uncovered 24 Android vulnerabilities. The corresponding vulnerability reports have been made public, so developers can use them directly. The author (@ai_fengshou) notes GitHub is investing heavily in open-source security.t.co/bt19tVTFz208:00
Intigriti Blog
In the summer of 2026, Intigriti celebrated a major milestone: its 10th anniversary! To mark the occasion, the team came together from around the globe. This article shares what they had to say about a decade of Intigriti! A note from CEO and Founder, Stijn Jans What 10 years of evolution looks like Intigriti’s journey shows how a bold idea evolved into a global cybersecurity company combining innovation, strategic investment, and a deeply rooted hacker-first culture. For ove
07:50
Medium9 articles
Medium daily digest · 9 articles
Mon, September 28
23:38
22:12
STÖK@STOKfredrikYouTube
Builders & Breakers | Local AI for Offensive Security: Models, Harnesses & Human Judgment ft Thomas
Local AI for Offensive Security: Models, Harnesses & Human Judgment Hamid from XBOW ended our last episode with a wish for better local models. So we invited Thomas Olofsson, aka Skjortan, to tell us what he can already do with them. Thomas brings his own models into sensitive client environments and uses them to help find, verify and reproduce vulnerabilities without sending the client’s data to a cloud model. Together with STÖK and KUGG, he gets into the hardware, the specialist agents and the skills that make smaller models useful for real penetration tests. The conversation goes beyond…
20:45
NahamSec@NahamSecYouTube
This WordPress Core Bug Can Lead to Remote Code Execution (CVE-2026-87902)
📚 Learn bug bounty hunting from me: https://bugbounty.nahamsec.training 💻 Practice some of my free labs and challenges: https://app.hackinghub.io If I Started Bug Bounty Hunting in 2024, I'd Do this - https://youtu.be/z6O6McIDYhU 2023 How to Bug Bounty - https://youtu.be/FDeuOhE5MhU Bug Bounty Hunting Full Time - https://youtu.be/watch?v=ukb79vAgRiY Hacking An Online Casino - https://youtu.be/watch?v=2eIDxVrk4a8 WebApp Pentesting/Hacking Roadmap - https://youtu.be/watch?v=doFo0I_KU0o 🌍 My website - https://www.nahamsec.com/ 👨💻 My free labs - https://app.hackinghub.io/ 🐦 Twitter - htt…
18:55
watchTowr Labs
God damn it, we're back in the room again. Yes, that sound in your ears is screaming. The footgun has gone off again, shockingly, and we are yet again dealing with a situation where the entire world apparently knew about Citrix NetScaler CVEs before Citrix had woken up
07:50
Medium6 articles
Medium daily digest · 6 articles
Sun, September 27
Sat, September 26
07:50
Medium10 articles
Medium daily digest · 10 articles
Fri, September 25
08:00
Intigriti Blog
Hi hackers, Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Compromising OpenAI, Slack, Meta, and more via a vulnerable image library Hacking OpenAI employee accounts in under 72 hours Breaking into Google's GFile for $100K Hacking AI CX agents Turbo Intruder 2 surpassing 100K requests per second over HTTP/3 And so much more! Let's dive in! Reconnaissance unleashed: meet CrowdRecon CrowdRecon is officially here! CrowdRecon brings crowd-l
继续滚动加载更多