New post: a five-phase, MITRE ATT&CK-aligned workflow for mem forensics, from evidence preservation to binary analysis. We also flag 4 issues that bias mem evidence: paging, demand paging, smearing, and binary transforms #ICDF2C25 reversea.me/index.php/brin… webdiis.unizar.es/~ricardo/files…
0
0
3
1,629
New on the blog: MARISSA reverse-engineers network protocol formats straight from PCAPs: no specs, no delimiters. Will be presented at @IEEEEUROSP 2026, come and say hi! reversea.me/index.php/infe… tool: github.com/reverseame/MAR…
1
3
18
2,797
New blog post! The simpler, the stealthier: we benchmarked 4 adversarial DGA models. The 2 simplest evade ML detectors >75% of the time and train in under 2s. Open-source: github.com/reverseame/adv…, blog post: reversea.me/index.php/the-… #DGA #MachineLearning #CyberSecurity #DIMVA2026
0
4
9
1,843
After the Takedown: Excavating Abuse Infrastructure with DNS Sinkholes #DNSSinkholes #AbuseInfrastructure #PassiveDNS #TakedownAnalysis #Badbox20 disclosing.observer/2026/01/14/exc…
0
0
1
1,454
Account Takeover in Facebook mobile app due to usage of cryptographically unsecure random number generator and XSS in Facebook JS SDK #FacebookAccountTakeover #InsecureRandomNumber #DOMXSS #MobileAppVulnerability #IframeExploitation ysamm.com/uncategorized/…
0
0
1
1,217
How I Used an Agent to Hunt Vulns #Blazelight #TerminalUI #WebNavigation #GuestPrompt #DigitalPortfolio blazelight.dev/blog/agent-vul…
0
1
5
904
Leaking Meta FXAuth Token leading to 2 click Account Takeover #FXAuthLeak #AccountTakeover #RedirectFlaw #MetaSecurity #BugBounty ysamm.com/uncategorized/…
0
2
2
1,174
StackWarp vulnerability #StackWarp #SEVSNP #StackManipulation #StackEngineBug #PrivilegeEscalation stackwarpattack.com/#home
0
0
5
748
Instagram account takeover via Meta Pixel script abuse #InstagramHack #MetaPixelAbuse #CrossWindowMessaging #OAuthCodeTheft #BugBounty ysamm.com/uncategorized/…
0
1
3
584
Multiple cross-site leaks disclosing Facebook users in third-party websites #XSLVulnerability #MetaSecurity #UserIdentification #PrivacyThreat #BugBountyProgram ysamm.com/uncategorized/…
0
0
2
588
WinBoat: Drive by Client RCE + Sandbox escape. #WinBoat #RemoteCodeExecution #SandboxEscape #DriveByAttack #UnauthenticatedAPI hack.do/posts/winboat-…
0
2
2
596
The ServiceNow AI Vulnerability: What Went Wrong and How to Secure Your AI Agents #ServiceNowAIHack #AIAgentSecurity #LegacyAISecurity #SupplyChainRisk #AIIdentity opena2a.org/blogs/servicen…
0
1
1
367
CVE-2026-20965: Cymulate Research Labs Discovers Token Validation Flaw that Leads to Tenant-Wide RCE in Azure Windows Admin Center #CVE202620965 #AzureWAC #TenantRCE #CymulateResearch #TokenValidation cymulate.com/blog/cve-2026-…
0
2
8
899
Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data #MicrosoftCopilot #RepromptAttack #DataTheft #SingleClickHack #AIVulnerability varonis.com/blog/reprompt
0
0
2
400
Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC #DroneHacking #FirmwareDumping #NANDFlash #ECCBruteforce #IoTResearch neodyme.io/en/blog/drone_…
0
11
43
2,321
Bad Vibes: Comparing the Secure Coding Capabilities of Popular Coding Agents blog.tenzai.com/bad-vibes-comp…
0
0
0
490
CVE-2025-64155: Three Years of Remotely Rooting the Fortinet FortiSIEM horizon3.ai/attack-researc…
1
22
111
12,807
Cybersecurity AI: A Game-Theoretic AI for Guiding Attack and Defense #CybersecurityAI #GameTheory #AIAttack #AIDefense #SecurityStrategy arxiv.org/pdf/2601.05887
0
1
6
1,200
Grok’s image edits spark sexualised deepfakes and regulator probes worldwide thebias.co.uk/articles/grok_…
0
0
0
507
WTF Are Abliterated Models? Uncensored LLMs Explained webdecoy.com/blog/wtf-are-a…
0
2
6
803