⤷ Title: How I Exploited a Coupon Logic Flaw to Get €674.90
════════════════════════
𐀪 Author: Shahin Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #business_logic_bug #cybersecurity #business_logic_flaw #web_penetration_testing
════════════════════════
𐀪 Author: Shahin Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:01:01 GMT
════════════════════════
⌗ Tags: #bug_bounty #business_logic_bug #cybersecurity #business_logic_flaw #web_penetration_testing
Medium
How I Exploited a Coupon Logic Flaw to Get €674.90 Worth of Candy for €0.00 — Intigriti Challenge #1026
Business logic vulnerabilities are among my favorite bugs to investigate. They don’t always require complex payloads, advanced tools, or…
⤷ Title: Session Swap: Exploiting Client-Side Role Cookies in Access Control
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:53:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #ai #red_teaming #bug_bounty
════════════════════════
𐀪 Author: 0xdzubair
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:53:54 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_development #ai #red_teaming #bug_bounty
Medium
Session Swap: Exploiting Client-Side Role Cookies in Access Control
https://48b0c72c-6357-session-swap-69254.challenges.webverselabs-pro.com/
⤷ Title: 12 Red Team OPSEC Principles Every Operator Should Know (and Actually Use)
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:03:26 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #ethical_hacking #cybersecurity #hacking
════════════════════════
𐀪 Author: Very Lazy Tech
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:03:26 GMT
════════════════════════
⌗ Tags: #penetration_testing #bug_bounty #ethical_hacking #cybersecurity #hacking
Medium
12 Red Team OPSEC Principles Every Operator Should Know (and Actually Use)
Ever tripped an alert during a pentest because of a single misstep? You’re not alone. Even seasoned red teamers sometimes blow their cover…
⤷ Title: Continuous Discovery and Reconciliation: Rethinking How We Understand the Modern Attack Surface
════════════════════════
𐀪 Author: Mohammad Koochaki
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:22:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #devsecops #application_security #security_culture #attack_surface_management
════════════════════════
𐀪 Author: Mohammad Koochaki
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:22:42 GMT
════════════════════════
⌗ Tags: #cybersecurity #devsecops #application_security #security_culture #attack_surface_management
Medium
Continuous Discovery and Reconciliation: Rethinking How We Understand the Modern Attack Surface
Why understanding exposure requires more than periodic scans — and why discovery without reconciliation is only half the story.
⤷ Title: The Hidden Security Risks Behind Modern React Apps
════════════════════════
𐀪 Author: Pooja Gandhakwala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:06:01 GMT
════════════════════════
⌗ Tags: #application_security #server_components #web_development #react #nextjs
════════════════════════
𐀪 Author: Pooja Gandhakwala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:06:01 GMT
════════════════════════
⌗ Tags: #application_security #server_components #web_development #react #nextjs
Medium
Your React App Has a Server-Side Attack Surface
What October 2026’s React Server Components and Next.js advisories teach us about shipping safely
⤷ Title: How to Buy a €666 Collectible for Free
════════════════════════
𐀪 Author: 0xst4rk
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:44:03 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #ctf #ethical_hacking #hacking
════════════════════════
𐀪 Author: 0xst4rk
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:44:03 GMT
════════════════════════
⌗ Tags: #bug_bounty_writeup #cybersecurity #ctf #ethical_hacking #hacking
Medium
How to Buy a €666 Collectible for Free
How two coupons were used four times to pay nothing.
⤷ Title: HTB — Shocker(OSCP)
════════════════════════
𐀪 Author: CYBER_delta
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:25:44 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #hackthebox #oscp #cybersecurity
════════════════════════
𐀪 Author: CYBER_delta
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:25:44 GMT
════════════════════════
⌗ Tags: #hacking #pentesting #hackthebox #oscp #cybersecurity
Medium
HTB — Shocker(OSCP)
analyze HTTP requests and enumerate CGI scripts
⤷ Title: You thought you’d bought a smart television, but they sold you an advertising machine.
════════════════════════
𐀪 Author: Enrique Dans
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:14:16 GMT
════════════════════════
⌗ Tags: #hacking #television #advertising #smart_tv #lg
════════════════════════
𐀪 Author: Enrique Dans
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:14:16 GMT
════════════════════════
⌗ Tags: #hacking #television #advertising #smart_tv #lg
Medium
You thought you’d bought a smart television, but they sold you an advertising machine. It’s time to fight back
For reasons I won’t go into, for a good part of the last 18 months I was forced to use television sets in places other than my home, and…
⤷ Title: The Lifecycle and Operational Realities of PHP2Shell (CVE-2026–109618 & CVE-2026–109619)
════════════════════════
𐀪 Author: RealSec.io
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:11:32 GMT
════════════════════════
⌗ Tags: #infosec #php #php2shell #cybersecurity
════════════════════════
𐀪 Author: RealSec.io
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:11:32 GMT
════════════════════════
⌗ Tags: #infosec #php #php2shell #cybersecurity
Medium
The Lifecycle and Operational Realities of PHP2Shell (CVE-2026–109618 & CVE-2026–109619)
In enterprise cybersecurity operations, critical remote code execution (RCE) vulnerabilities in foundational infrastructure represent the…
⤷ Title: PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column (Manual)
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:11:01 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #cybersecurity #portswigger #infosec
════════════════════════
𐀪 Author: Muhammad Raza
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:11:01 GMT
════════════════════════
⌗ Tags: #sql_injection #web_security #cybersecurity #portswigger #infosec
Medium
PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column
PortSwigger Lab: SQL Injection UNION Attack, Retrieving Multiple Values in a Single Column Difficulty: Practitioner Target: PortSwigger Web Security Academy Objective The objective of this lab is to …
⤷ Title: Cybersecurity Exceptions: The Hidden Attack Surface
════════════════════════
𐀪 Author: Meravytes
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:41:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #meravytes #infosec #cyber_risk
════════════════════════
𐀪 Author: Meravytes
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:41:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #meravytes #infosec #cyber_risk
Medium
Cybersecurity Exceptions: The Hidden Attack Surface
Cybersecurity programs are built around rules. Organizations define security policies, establish technical controls, deploy monitoring…
⤷ Title: >> Phishing vs Spear Phishing: How Cybercriminals Trick Their Victims
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:55:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing
════════════════════════
𐀪 Author: Amitra Kumar
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:55:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing
Medium
>> Phishing vs Spear Phishing: How Cybercriminals Trick Their Victims
A cybersecurity guide to understanding the difference, recognizing warning signs, and staying protected.
⤷ Title: PHP2Shell (TryHackMe)
════════════════════════
𐀪 Author: Dudlu
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:01:54 GMT
════════════════════════
⌗ Tags: #php2shell #review #tryhackme
════════════════════════
𐀪 Author: Dudlu
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:01:54 GMT
════════════════════════
⌗ Tags: #php2shell #review #tryhackme
Medium
PHP2Shell (TryHackMe)
Overview
⤷ Title: Benign | TryHackMe
════════════════════════
𐀪 Author: Shridharan
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:54:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #benign #soc #tryhackme
════════════════════════
𐀪 Author: Shridharan
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 17:54:25 GMT
════════════════════════
⌗ Tags: #cybersecurity #ctf #benign #soc #tryhackme
Medium
Benign | TryHackMe
Scenario
⤷ Title: NETMAP: A Desktop GUI for Nmap-Based Network Reconnaissance
════════════════════════
𐀪 Author: Parthib Dewanjee
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:13:34 GMT
════════════════════════
⌗ Tags: #python #network_security #cybersecurity #nmap #ethical_hacking
════════════════════════
𐀪 Author: Parthib Dewanjee
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 18:13:34 GMT
════════════════════════
⌗ Tags: #python #network_security #cybersecurity #nmap #ethical_hacking
Medium
NETMAP: A Desktop GUI for Nmap-Based Network Reconnaissance
Discovering a network is only the first step. Understanding what you discover is where the real work begins.
⤷ Title: Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
════════════════════════
𐀪 Author: Associated Press
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:20:56 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Featured
════════════════════════
𐀪 Author: Associated Press
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:20:56 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Featured
SecurityWeek
Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI
A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks.
⤷ Title: Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 23:42:22 +0530
════════════════════════
⌗ Tags: No_Tags
════════════════════════
𐀪 Author: Unknown
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 23:42:22 +0530
════════════════════════
⌗ Tags: No_Tags
⤷ Title: 12,976 Refrigeration Controls Found Exposed Online in 99 Countries
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:03:53 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attack #Cybersecurity #Forescout #IoT #Refrigeration #security #Vedere Labs #Vulnerability
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:03:53 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attack #Cybersecurity #Forescout #IoT #Refrigeration #security #Vedere Labs #Vulnerability
Hackread
12,976 Refrigeration Controls Found Exposed Online in 99 Countries
Forescout found 12,976 exposed refrigeration services in 99 countries, warning that attackers could alter temperatures and spoil food, medicines and supplies.
⤷ Title: How I Found SSRF in 6 Known Companies Using One Methodology in 2026
════════════════════════
𐀪 Author: Shawkatemad
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:28:09 GMT
════════════════════════
⌗ Tags: #hacking #programming #web_security #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Shawkatemad
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 20:28:09 GMT
════════════════════════
⌗ Tags: #hacking #programming #web_security #cybersecurity #bug_bounty
Medium
How I Found SSRF in 6 Known Companies Using One Methodology in 2026
Bug Bounty SSRF Web Security Methodology Kubernetes
⤷ Title: A 666 EUR box for 66 EUR
════════════════════════
𐀪 Author: Krishna_Jonnagaddala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:36:06 GMT
════════════════════════
⌗ Tags: #ctf #web_security #intigriti #cybersecurity #bug_bounty
════════════════════════
𐀪 Author: Krishna_Jonnagaddala
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:36:06 GMT
════════════════════════
⌗ Tags: #ctf #web_security #intigriti #cybersecurity #bug_bounty
Medium
A 666 EUR box for 66 EUR
How Intigriti’s October 2026 challenge disguised a one-line coupon bug as an HTTP smuggling puzzle.
⤷ Title: I Found an Open Admin Panel on the UP Ground Water Department Portal
════════════════════════
𐀪 Author: Siddharth
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:25:11 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #web_security #bug_bounty #ethical_hacking
════════════════════════
𐀪 Author: Siddharth
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 19:25:11 GMT
════════════════════════
⌗ Tags: #information_security #cybersecurity #web_security #bug_bounty #ethical_hacking
Medium
I Found an Open Admin Panel on the UP Ground Water Department Portal
A robots.txt entry led me there. The page opened without an admin login.