Welcome to the latest CVE WATCHTOWER briefing. Our team compiled this weekly threat intelligence report to highlight active cyber risks. Between August 10 and August 16, 2026, security researchers…

From manual QA tester to writing my own recon and security tooling — a practical breakdown of what I built, why, and what surprised me.

30-Second Version: The most-upvoted account takeover in HackerOne’s entire disclosed-reports dataset contains no exploit, no injection, no…

In July, during a cybersecurity test, one of OpenAI’s autonomous AI agents stopped treating the test as a boundary.

Summary:

One field in a JWT header. That’s all it took to slip past 8x8’s API.

During a security assessment on a popular e-commerce platform, I stumbled upon a classic yet frequently overlooked vulnerability, an…

Role-based access control often begins as a small feature: administrators can manage users, operators can process transactions, and…

It is commonly believed that “hacking” is a complex technical attack in which hackers choose passwords and penetrate systems.

Cyber threats are becoming more advanced, and organizations of every size are exposed to risks through websites, applications, networks…

Modern web applications increasingly depend on APIs to connect frontends, mobile apps, microservices, third-party platforms, and internal…

Why AI applications need a different approach to application security.

A home router can appear entirely functional – broadcasting Wi-Fi and sitting quietly on a shelf for years – while silently routing someone else’s attack traffic. Researchers hav…

At a glance Malware family: Kimwolf (also tracked as AISURU) Threat actor: Unknown (Operators manage both Linux IoT and Android variants) Target or victims: Android TV boxes and set-top boxes Deli…

At a glance Malware family: Project CAV3RN Threat actor: Unattributed cyber espionage cluster Target or victims: Targeted organizations in Israel Delivery vector: Under investigation Key capabilit…

Cursor, the innovative startup that recently caused massive ripples within the AI-assisted coding arena, has officially secured its future trajectory. SpaceX, the aerospace titan helmed by Elon Mu…

There’s a very specific kind of annoyance every bug hunter knows.

What’s the fastest way to lose control in a breach? Miss the signs of lateral movement. You patch, you monitor, you lock down the perimeter…

Twelve challenges. One vulnerability class. Integer inputs, blind injection, second-order attacks, and a two-query chain where the output…

My-CMSMS walkthrough

In recent years, cyber security threats have become very complex and organizations have become highly involved in securing their computer…