Abstract We all know AI can find bugs. After a decade of research, I asked a harder question: can an autonomous system invent new attack techniques, and use them to hack live websites at scale? Buildi

A single misconfigured listening socket on FIMER's React 2 hybrid inverter lets an unauthenticated attacker send commands straight to the Supervisor MCU that governs the device's grid protections.

Gareth Heyes - gareth.heyes@portswigger.net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this

Taking apart a freshly compiled Interlock ESXi decryptor, and what it reveals about how the encryptor works.

This post releases a new universal chain that turns a single Marshal.load into command execution on Ruby, built with new gadgets from untapped sources as well as old gadgets put to new use.

Suddenly, you’re in a room. You look around - oh, you’re surrounded by other new starters at your new job. Yes, it’s Monday, and you’re being onboarded.

You know the drill - it’s the typical enterprise “please don’t be a bad person or we may have

We pointed Cascade, Escape's AI pentesting engine, at a production AI agent. The agent had a guardrail built to catch prompt injection. Cascade got past it on the second try.

The trick wasn't a smarter payload, just a different pretext, and the agent handed…

Back in April, I was talking with our system and software engineering teams at PRODAFT about the possibilities of using a managed database service. Due to the nature of our business, we simply cannot start using managed services right away. I told my team…

Here is how anyone can unwrap the organization’s internal tools/products that no one is supposed to know about.
Typically, in software organizations, most of us don’t want to share internal applications on the internet, but we unintentionally share application…

n8n uses a user-supplied schema name as a bare object key. Set it to __proto__, pollute the prototype, chain into RCE via the Git node. One request, full shell.

Technical writeup for CVE-2026-6837 covering the PKCS#12 export command-injection path, proof, affected models, and full emulation workflow.

Don’t miss the AMA with Black Hat speakers Lidor B.

The actual bug isn't the interesting part in this case, it was the vendor's response - although it's crazy that we're still finding SQL injection in 2026.

ChatMate, the first documented instance of remote prompt execution, shows how a malicious document can lead to sandbox escape.

Remedio discovered an unauthenticated RCE flaw in CircleCI's MCP server allowing for full pipeline takeover. Learn how and why it matters »

I found a cute game about refusing birds. So I told Codex it was a CTF, and it stopped playing by the rules

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications, negotiations, and data leak operations alongside double extortion…

My seven phase forensics process for investigating suspicious Git repositories: preserving evidence, analysing patch content and committer identity, confirmi...

Hunt.io recovered a single operator's toolkit from an open directory: 14,530+ Dahua cameras compromised across Ukraine and Russia in 35 days. Inside the campaign