Bug bounty Tips
Ir al canal en Telegram
🛡️ Cybersecurity enthusiast | 💻 Helping secure the digital world | 🌐 Web App Tester | 🕵️♂️ OSINT Specialist Admin: @laazy_hack3r
Mostrar más5 784
Suscriptores
+1024 horas
+887 días
+41930 días
Archivo de publicaciones
5 784
Introducing Sonar Foundation Agent | Sonar
https://www.sonarsource.com/blog/introducing-sonar-foundation-agent/
5 784
CSRF Protection without Tokens or Hidden Form Fields
https://blog.miguelgrinberg.com/post/csrf-protection-without-tokens-or-hidden-form-fields
5 784
December CTF Challenge: Chaining XS leaks and postMessage XSS
https://www.intigriti.com/researchers/blog/hacking-tools/december-ctf-challenge-xs-leaks-postmessage-xss
5 784
#AIOps
#Analytics
"AI Agent Trends 2026", Google 2025.
// This report provides key insights for business leaders to shape their AI agent strategy for 2026 and beyond. Within each trend, you will find real-life examples, technical resources, and customer stories to share with your teams for deeper learning. These trends were identified using a blend of qualitative and quantitative data, including internal Google Cloud and Google DeepMind interviews with AI leaders, customer case studies, and insights from The ROI of AI 2025 report
5 784
#Threat_Research
"Elastic Global Threat Report", 2025.
// The age of patient, stealthy attacks is giving way to a new era of high-velocity threats. Our year-over-year analysis reveals a clear strategic shift: Adversaries are retooling for speed, weaponizing AI to generate novel threats at scale, and prioritizing immediate execution over prolonged stealth. This acceleration forces defenders to adapt to an attack lifecycle measured in minutes, not months, where rapid, context-rich decisions drawn from both real-time and historical data have become the key to effective defense
5 784
#Analytics
#WebApp_Security
OWASP Top 10 2025:
The Ten Most Critical Web Application Security Risks
https://owasp.org/Top10/2025/0x00_2025-Introduction
5 784
Ollama Remote Code Execution: Securing the Code That Runs LLMs
https://www.sonarsource.com/blog/ollama-remote-code-execution-securing-the-code-that-runs-llms/
5 784
#Deepfakes
"Can Current Detectors Catch Face-to-Voice Deepfake Attacks?", 2025.
// First, we present the first systematic evaluation of FOICE detection, showing that leading detectors consistently fail under both standard and noisy conditions. Second, we introduce targeted fine-tuning strategies that capture FOICE-specific artifacts, yielding significant accuracy improvements. Third, we assess generalization after fine-tuning, revealing trade-offs between specialization to FOICE and robustness to unseen synthesis pipelines. These findings expose fundamental weaknesses in today’s defenses and motivate new architectures and training protocols for next-generation audio deepfake detection
5 784
#OSINT
#AppSec
#Research
"Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy", NDSS 2026.
]-> https://github.com/sbaresearch/whatsapp-census
// To initiate conversations, users must first discover whether their contacts are registered on the platform. This is achieved by querying WhatsApp's servers with mobile phone numbers extracted from the user's address book. This architecture inherently enables phone number enumeration, as the service must allow legitimate users to query contact availability. While rate limiting is a standard defense against abuse, we revisit the problem and show that WhatsApp remains highly vulnerable to enumeration at scale
5 784
The methods and properties that offer various means to modify and navigate the document. Each serves a specific purpose, tailored to your requirements for the document's layout.
GitBook
#bug_bounty #xss #js #dom #dom_xss
5 784
https://challenge-1225.intigriti.io/
http://GitBook_s.t.me
#blog #intigriti #challenge
¡Ya disponible! Investigación de Telegram 2025 — los principales insights del año 
