Netsec
@RNetsec
7.72K subscribers
23.3K links
This channel posts the feed from r/netsec.
For any suggestions dm @streaak
Donate to keep the bot running https://www.paypal.me/akhilgv
Download Telegram
About
Blog
Apps
Platform
Join
Netsec
7.72K subscribers
Netsec
Leaking internal headers in Flask Ninja with deserialization
https://ift.tt/egEGHMT

Submitted July 21, 2026 at 03:38PM by 0xcrypto
via reddit https://ift.tt/lg3yIho
eval.blog
Leaking internal headers in Flask Ninja with deserialization
Evaluations and research on security, software, and AI by Vikrant Singh Chauhan.
354 views
Netsec
Writeup & POC: CVE-2026-49176 Windows WalletService to SYSTEM (LPE)
https://davidcarliez.github.io/blog/cve-2026-49176-walletservice-to-system/

Submitted July 21, 2026 at 08:12PM by ShufflinMuffin
via reddit https://ift.tt/v52dnCr
David Carliez
CVE-2026-49176 Exploit Development: WalletService to SYSTEM
Exploit development for the Windows WalletService vulnerability, from caller-controlled known-folder resolution to a persisted ESE callback and an interactive SYSTEM shell.
352 views
Netsec
Domain registration information should be transparent
https://ift.tt/wTRK32G

Submitted July 21, 2026 at 09:36PM by f311a
via reddit https://ift.tt/OTm6bq4
Artem Golubin
Domain registration information should be transparent
My thoughts on WHOIS and RDAP protocols.
324 views
Netsec
The Hidden CCS2 Attack Surface on EV Chargers
https://ift.tt/yAnj1Ct

Submitted July 21, 2026 at 09:28PM by self
via reddit https://ift.tt/ImvEFt0
Saiflow
The Hidden CCS2 Attack Surface on EV Chargers
The EV charging industry has well-established security standards. OCPP provides clear guidelines for securing the communication channel between EV Chargers and the Charging Station Management System. While the industry has focused on securing the backend…
339 views
Netsec
What happened after we pushed our .env to a public repo
https://ift.tt/Kmq4OHd

Submitted July 21, 2026 at 10:45PM by SuddenAd2981
via reddit https://ift.tt/mB5Pf08
tachyon.so
What happened after we pushed our .env to a public repo | Tachyon Blog
Tachyon reviews pull requests in full-codebase context, validates exploitability, and gives developers fix-ready security findings before code merges.
350 views
Netsec
The FCC Wants to Ban Burner Phones. The CNET Reporter Tracking This Story is Here to Chat. Ask Him Anything.
https://ift.tt/7nkprdv

Submitted July 22, 2026 at 01:49AM by _clickfix_
via reddit https://ift.tt/F30PgHB
Substack
The FCC Wants to Ban Burner Phones. The CNET Reporter Tracking This Story is Here to Chat. Ask Him Anything.
The FCC has proposed Know-Your-Customer rules that would require telecom companies to collect a name, physical address, and government ID for every cellphone customer.
355 views
Netsec
Ask Gemini for a "Walmart MCP" and the first result is malware. try it.
https://ift.tt/EsworSh

Submitted July 22, 2026 at 03:48AM by XSSpresso
via reddit https://ift.tt/ORZ4YBQ
Island.io
AgentBaiting: How Fake AI Skills Deliver Malware at Scale
Island researchers uncover 7,600+ malicious GitHub repos, over 800 posing as AI Skills and MCP servers, that trick AI agents into recommending malware.
371 views
Netsec
Found a decade of financial sector procurement data sitting on a former employee's home NAS
https://ift.tt/JLga5Yn

Submitted July 22, 2026 at 03:33PM by CybelAngel_official
via reddit https://ift.tt/LQjfc60
CybelAngel
How a personal NAS device exposed 10 years of bank data
CybelAngel analysts found a decade of confidential financial sector data exposed on a personal NAS device, a huge third-party risk.
315 views
Netsec
I was reporter #11 for a WPForms PayPal webhook vulnerability (CVE-2026-4986)
https://ift.tt/54vpIl9

Submitted July 22, 2026 at 08:16PM by unknownhad
via reddit https://ift.tt/H6gPY5I
Himanshu Anand :: Security & Other Notes
Reporter 11: 10 people found the WPForms PayPal bug before me (CVE-2026-4986)
TLDR WPForms Lite is a WordPress form plugin with 5 million plus active installations. Public advisory data identifies versions 1.10.0.1 through 1.10.0.4 as affected by CVE-2026-4986: the PayPal Commerce webhook processed incoming events without first verifying…
264 views
Netsec
CVE-2026-50458: Finding a UAF in the Windows Brokering File System
https://rotcee.github.io/posts/CVE-2026-50458-finding-a-UAF-in-windows-brokering-file-system/

Submitted July 23, 2026 at 12:38AM by Internal-Key64
via reddit https://ift.tt/nAM8uvC
Rotce’s Blog
CVE-2026-50458: Finding a UAF in the Windows Brokering File System
On Tuesday, July 14, Microsoft released the largest Patch Tuesday update in its history, fixing more than 600 vulnerabilities. A bug I reported to Microsoft on May 17 was patched as CVE-2026-50458 in this release, so I am publishing the writeup I wrote at…
228 views
Netsec
I ran a paid bug-bounty-style game against my own multimodal prompt firewall, it didn't make money, so here's the code, the model and 13k real bypass attempts
https://ift.tt/ANlUSMY

Submitted July 22, 2026 at 11:41PM by BordairAPI
via reddit https://ift.tt/zC0JN62
huggingface.co
Bordair/bordair-detector · Hugging Face
We’re on a journey to advance and democratize artificial intelligence through open source and open science.
244 views
Netsec
GitHub issues $100,000 bounty for critical RCE vulnerability
https://ift.tt/kj41l0y

Submitted July 23, 2026 at 03:51AM by ryanmerket
via reddit https://ift.tt/bXhal6z
RuntimeWire
GitHub issues $100,000 bounty for critical RCE vulnerability disclosed by @sagitz_
Researcher @sagitz_ disclosed a remote code execution vulnerability in GitHub, earning a $100,000 bounty—the largest payout in the platform's bug bounty program.
189 views
Netsec
PE OopsSec: Mind your PE, guard your OPSEC
https://ift.tt/Af1KzbT

Submitted July 23, 2026 at 05:42AM by Cold-Dinosaur
via reddit https://ift.tt/rEKh26S
Zerosalarium
PE OopsSec: Mind your PE, guard your OPSEC
PE-OopsSec helps red teams, pentesters, and game developers give their payloads a final once‑over before putting them into the real world
122 views