uz
Feedback
Bug bounty Tips

Bug bounty Tips

Kanalga Telegram’da o‘tish

🛡️ Cybersecurity enthusiast | 💻 Helping secure the digital world | 🌐 Web App Tester | 🕵️‍♂️ OSINT Specialist Admin: @laazy_hack3r

Ko'proq ko'rsatish
5 691
Obunachilar
+724 soatlar
+757 kunlar
+47630 kunlar
Obunachilarni jalb qilish
Iyun '26
Iyun '26
+165
0 kanalda
May '26
+588
0 kanalda
Get PRO
Aprel '26
+543
0 kanalda
Get PRO
Mart '26
+358
0 kanalda
Get PRO
Fevral '26
+318
0 kanalda
Get PRO
Yanvar '26
+360
0 kanalda
Get PRO
Dekabr '25
+411
1 kanalda
Get PRO
Noyabr '25
+464
0 kanalda
Get PRO
Oktabr '25
+152
0 kanalda
Get PRO
Sentabr '25
+74
0 kanalda
Get PRO
Avgust '25
+213
1 kanalda
Get PRO
Iyul '25
+41
0 kanalda
Get PRO
Iyun '25
+15
0 kanalda
Get PRO
May '25
+27
0 kanalda
Get PRO
Aprel '25
+43
0 kanalda
Get PRO
Mart '25
+41
0 kanalda
Get PRO
Fevral '25
+45
0 kanalda
Get PRO
Yanvar '25
+88
1 kanalda
Get PRO
Dekabr '24
+73
2 kanalda
Get PRO
Noyabr '24
+234
2 kanalda
Get PRO
Oktabr '24
+372
2 kanalda
Get PRO
Sentabr '24
+307
2 kanalda
Get PRO
Avgust '24
+414
2 kanalda
Get PRO
Iyul '24
+131
1 kanalda
Get PRO
Iyun '24
+84
0 kanalda
Get PRO
May '24
+196
2 kanalda
Get PRO
Aprel '24
+117
0 kanalda
Get PRO
Mart '24
+41
0 kanalda
Get PRO
Fevral '24
+76
0 kanalda
Get PRO
Yanvar '24
+47
0 kanalda
Get PRO
Dekabr '23
+13
0 kanalda
Get PRO
Noyabr '23
+79
0 kanalda
Get PRO
Oktabr '23
+282
0 kanalda
Sana
Obunachilarni jalb qilish
Esdaliklar
Kanallar
12 Iyun0
11 Iyun+20
10 Iyun+12
09 Iyun+9
08 Iyun+14
07 Iyun+8
06 Iyun+16
05 Iyun+11
04 Iyun+18
03 Iyun+22
02 Iyun+15
01 Iyun+20
Kanal postlari
🖼️ Daily Cybersecurity Meme "LEGACY MONOLITH" "DEVELOPERS" "NEW MICROSERVICE WITH 0 TESTS"
🖼️ Daily Cybersecurity Meme "LEGACY MONOLITH" "DEVELOPERS" "NEW MICROSERVICE WITH 0 TESTS"

2
🦾 **VulnOps Daily Digest** 🌙 11 Jun 2026 · 11:30 PM IST 📰 Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks https://news.google.com/rss/articles/CBMipwFBVV95cUxQVnBuS05STW9PenoybkdJWEtBalU1UlFCUkdOd3A2XzQ3eUZMRF9EYU14VnZjMzVNV1ZHU24wX1EtdDd5TllSYlFIdVlfcU44MTNPaENzNHc5Wm9OSDJYYXdTcEFUWXJjNzVRYlJ0TU1EVU5oNXpUaW9SbDRDckRrRzJWSlFTa2tWbmNMQVczWFhoWktYUTg1MS1wTWFiaUtnUmNQZEZnRdIBrAFBVV95cUxQVy1nV3V1Q09lVHJlUlFMMlRUQXFPbkFuOXR3eEM0NzdFN0ROa2RTN2dfVFM4M2syZDhUMnp4UGdJV2k3RzZJM2NKMmtQa25mUmtKdW9iUGFqOW5kc2hJSzhINTNnTk9wZ3FHV3lTTzdJSktCVWI0d2hJY0ZUOW4yOURIN3pwYW1adVp0Q3RKRWFud0lGTXBoLWRHWHhtTDlkaUlVR0NyVzYtWTh6?oc=5 📰 Security Alert CVE-2026-35273 Released https://news.google.com/rss/articles/CBMifEFVX3lxTFBZSXUzZjExaWhmdGdEdWFIbktlcmU5bVVvRXo5SlZQX1JuaHFTNmpKQU95c2Z0c3BUeWZYS04ySkpka0ZPeGhkSUJSUGd0b1k2c3RBS2J1ODBjZlVMSnVqSm9xaEM3N2FTQXFGdGVJMHE5WnBSb0RSQlE1NmM?oc=5 📰 Oracle PeopleSoft servers under attack, Oracle pushes out-of-band security alert https://news.google.com/rss/articles/CBMikwFBVV95cUxNaVZiakV1ZElUcVpQb3FBZjBpay1GLTFMdGNtY0tPYzlLWHJSN2hWZkVGZTRCSko2aTRqV0JvemFUeldrcENWd1Y3MlZITTFDRTNiWUtOZl9WQzJBLWViMTZmZktyQXZYOWFsS09GaEVmZ3ZDcnoteVpyNERzUFZnYTRNM2FKX2dZSFBBUjFRTW1TT2c?oc=5 📰 DNV selected to secure Dominican Republic’s first monorail with rail cybersecurity services https://news.google.com/rss/articles/CBMiwAFBVV95cUxPYUpHNEVyLUVTUUc0c2pIOHl3VlJqVngtME9fYmFvYkNyMENPVmRmdkc0M0FnUEZFS3lZNXZnNko1UzhGUFEwNkItbFdOYU5PNnQ2Ukw2RzZDM2ZVMmpWWXBVVk1idTBJNnlfTkVlbnQxWTBGNGFEUDM0OXpaTHR0NUYyNXNHUXMyMmM5WDU3TkQ4cUthNGpad2h5QzZlZ0RZM0Y3VXFfbUhmMlZ0QXh5LUY2QVRrcy1WYlJyamdzY2c?oc=5 📰 Cybersecurity Stars Awards 2026: Winners Announced Across 95 Categories https://news.google.com/rss/articles/CBMihAFBVV95cUxQd1luNld1V1ctR0F2U1pxb3doeVRHRXktb0c4enhDVktXdDV6ZnBwcFRmNFVFd3F2SE0ySDFYWW4xbkU4aThvTEZvZkwyTW5RQlVxSEJubmxUUHlyRnBhaHc5UEliYmxxYVMxRWRCaURDWEtGRUR2SUIzbHNiaFF3R0ZDekQ?oc=5 💡 Default creds are still the #1 initial access vector. Change them. ⚡ _VulnOps · AI-Powered Security_
139
3
🦾 **VulnOps Daily Digest** ☀️ 11 Jun 2026 · 01:36 PM IST 📰 Krebs on Security – In-depth security news and investigation https://news.google.com/rss/articles/CBMiQkFVX3lxTE1pNDRzd3JnaFdKdnNXeEl4cnY4aURsMnJhQWQxTkpUUkg1WmZocEw0S1huTVhxR19KZGUyTW0tU2w0QQ?oc=5 📰 Security Alert CVE-2026-35273 Released https://news.google.com/rss/articles/CBMifEFVX3lxTFBZSXUzZjExaWhmdGdEdWFIbktlcmU5bVVvRXo5SlZQX1JuaHFTNmpKQU95c2Z0c3BUeWZYS04ySkpka0ZPeGhkSUJSUGd0b1k2c3RBS2J1ODBjZlVMSnVqSm9xaEM3N2FTQXFGdGVJMHE5WnBSb0RSQlE1NmM?oc=5 📰 CISA gives agencies new vulnerability remediation deadlines that take risk levels into account https://news.google.com/rss/articles/CBMipAFBVV95cUxQUm9OV3AzZmRIdFU2T2NkREE4ZGlob05NT0w3V3B0MFlSYldHWTdvWTJBS2F0SEp3TFZzaDVDZldTVE54NmRORllzQnZLVk9UUzNJeXhNMDNXdGgtUVF1cDRfVzRyWkRXMDlCNnBEUEZCV0JGSGN6UmF0WUQzZnZ1QzhtaTBWQWVYWFpkOTBYZnk0eFNTd1FzLWRPbm5HTlAtLUk0RQ?oc=5 📰 Threat Brief: Active Exploitation of PAN-OS CVE-2026-0257 https://news.google.com/rss/articles/CBMihwFBVV95cUxQTUVTa0pZeTdwQS1ySmhSTV85cFBkeXdBOUFkWWFxeW9MOE9RNGtETVlwOEVXbkxxcmREUkNqVWlQNmh6VHJMMGZZTHBfdGhmTTNfaTh4S1gwMnZCdkhEdkJrYXBMb0NJOXJhT0U4R0lFVGJfYjNaREM3eFMxeU52bVdpUjhrbGc?oc=5 📰 Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5 💡 MFA stops 99% of account takeovers. Enable it everywhere. ⚡ _VulnOps · AI-Powered Security_
238
4
🖼️ Daily Cybersecurity Meme "PATCH LOG4J IN ALL SERVICES" "REWRITE EVERYTHING IN RUST" "THE ONLY TWO OPTIONS"
🖼️ Daily Cybersecurity Meme "PATCH LOG4J IN ALL SERVICES" "REWRITE EVERYTHING IN RUST" "THE ONLY TWO OPTIONS"
205
5
🖼️ Daily Cybersecurity Meme "ENCRYPTED S3 BUCKET" "INTERNS" "PUBLIC S3 BUCKET WITH "backup-DO-NOT-DELETE""
🖼️ Daily Cybersecurity Meme "ENCRYPTED S3 BUCKET" "INTERNS" "PUBLIC S3 BUCKET WITH "backup-DO-NOT-DELETE""
269
6
🦾 **VulnOps Daily Digest** 🌙 10 Jun 2026 · 11:30 PM IST 📰 Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5 📰 BOD 26-04: Prioritizing Security Updates Based on Risk https://news.google.com/rss/articles/CBMimgFBVV95cUxPTHhha0dLbWU2aTlDSXFXMGtCaWZNY09UTU5ISWZTOXNLY0xXTnJDSzNMQndTZElSWHFGb2xSNVZxV0Z1QV85Q2xWUU00NkVDelhuM0Zmb19tVVVLNWhpN0QtUmNwMXdMZUNONUNYc0JrbzQ1SkFTR056WWNnOEMtNGhDbExQekxiaWsyQzJUUHR0TFpUdUh2Yzd3?oc=5 📰 CISA gives agencies new vulnerability remediation deadlines that take risk levels into account https://news.google.com/rss/articles/CBMipAFBVV95cUxQUm9OV3AzZmRIdFU2T2NkREE4ZGlob05NT0w3V3B0MFlSYldHWTdvWTJBS2F0SEp3TFZzaDVDZldTVE54NmRORllzQnZLVk9UUzNJeXhNMDNXdGgtUVF1cDRfVzRyWkRXMDlCNnBEUEZCV0JGSGN6UmF0WUQzZnZ1QzhtaTBWQWVYWFpkOTBYZnk0eFNTd1FzLWRPbm5HTlAtLUk0RQ?oc=5 📰 Cyera, a Cybersecurity Start-Up for the A.I. Era, Raises $600 Million https://news.google.com/rss/articles/CBMikgFBVV95cUxPSkFhMUZQeVlhNkNmSmpHQjVjem5VbW13ZjhYUXI2S1FRSWZOWnVDN0h0cUxCaU13dzUzd3JrYl9QbHFjVHJZWmdINkZJcGwyLW4yOThkZU1mWEZ5Mzdxdkc4aFl4QVd3SGJmdHlNTkFrbmtNWk9qSDZGczBPUmphckZCcmpjSENrakxBeWlIZEF6UQ?oc=5 📰 OT cybersecurity becomes a board-level priority as industrial security maturity rises, Fortinet finds https://news.google.com/rss/articles/CBMi6AFBVV95cUxOOEN0eXNEM3VsaFkzM0RudEZMYzBYbHk3WHhSQW9feElyMmNfYl9aeHh2c3d3eFF0azV2d0o3MmhwRXNvYV9VLW55TkwyU25mY2tGekV3elh5YTRnYTBWc2h2dkpWUWhlUkdjYUE4U3dXWkxpdmd3YWpOdkt2eDQ2Q0dzYTZxSll6TmJrdVRGYmdjSjJTT1ptVEd6cnBtTk5kRFE0NFMzMW1wWVBCSEtuRTYxSHYtUXBxRU9FX3B6cms3S1U4RGZoaWFpMHFNVTJFZ0FOZ2FhX3dIc19xYXhpeUtfWTByTlJK?oc=5 💡 Run weekly dependency scans — CVEs don't wait for patch Tuesday. ⚡ _VulnOps · AI-Powered Security_
250
7
🖼️ Daily Cybersecurity Meme ""ADMIN123" IS A PERFECTLY" "SECURE PASSWORD"
🖼️ Daily Cybersecurity Meme ""ADMIN123" IS A PERFECTLY" "SECURE PASSWORD"
270
8
🦾 VulnOps Daily Digest 🌙 10 Jun 2026 · 06:54 PM IST 📰 Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5 📰 More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520) https://news.google.com/rss/articles/CBMi4gFBVV95cUxOWFVjTEVhWTlLSnRCYk85Qlo1SHYwYkFGVnhnTXQ2by1UaWpVTjJBLXJQYmdqcVdWUTduT2lhSUpZMlh3bW1MeW1qUlp5MEhtSXRNRXJWVDgwOHVmcUpHZmx3Q01wVDM3RFBsMEc5eWROZEl0MzBvZUtCd3VFb0JrelZyM190TWJEam9rYUdvNzNVTHJVdGUxZnNqbm0wZWpVNzVyNnJ1Ql9RRkQwQzVZOVNxM2h3YmVxVjBRcjNkNS04aU9Qc2x0LXVWbmdhSklRM1h3Y0FIS2huSEEzREJCYXRB?oc=5 📰 OT cybersecurity becomes a board-level priority as industrial security maturity rises, Fortinet finds https://news.google.com/rss/articles/CBMi6AFBVV95cUxOOEN0eXNEM3VsaFkzM0RudEZMYzBYbHk3WHhSQW9feElyMmNfYl9aeHh2c3d3eFF0azV2d0o3MmhwRXNvYV9VLW55TkwyU25mY2tGekV3elh5YTRnYTBWc2h2dkpWUWhlUkdjYUE4U3dXWkxpdmd3YWpOdkt2eDQ2Q0dzYTZxSll6TmJrdVRGYmdjSjJTT1ptVEd6cnBtTk5kRFE0NFMzMW1wWVBCSEtuRTYxSHYtUXBxRU9FX3B6cms3S1U4RGZoaWFpMHFNVTJFZ0FOZ2FhX3dIc19xYXhpeUtfWTByTlJK?oc=5 📰 Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs https://news.google.com/rss/articles/CBMifkFVX3lxTE5yNWJfMlRwcjhGT1BzT1RrdHk0VEJIU3lTYjIxOTVYcXNmUHB1WkJlZjA5Vl9fYmR4aV8yS01DbXlKaUN0T3B1UmswV09PclhTNF81R2dnZlhTTDE2QnNWVDhnaXhNTC01R2YxelJ2TTV4ZHFXMVZRMnVBOUk5Zw?oc=5 📰 Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities https://news.google.com/rss/articles/CBMitgFBVV95cUxPSW9BNHZBMzV6UzF5X0NvbHYySDJVTjVTRFQ3SWZJSUs3Zlg2eWd1bkp0eS1BVC1FMzRTM3JKY1lQR0FucHg2UXA5SzROcHpIQmp4RG1CNE9maVFVaE5mNVVPblRaNnNEbFBybS10RUpWUHNyTlRuZ1IwZ0lPY1VJczdvMDhVT0xZbnRnNkhtX1N5Z2ZwdXlsUi1kRnRUVHRKcGU3QnlHQjlMSFB1OFlCbDFwRy10UQ?oc=5 💡 Segment your network. One compromised host shouldn't mean game over. ⚡ VulnOps · AI-Powered Security
257
9
🦾 **VulnOps Daily Digest** ☀️ 10 Jun 2026 · 01:37 PM IST 📰 Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities https://news.google.com/rss/articles/CBMitgFBVV95cUxPSW9BNHZBMzV6UzF5X0NvbHYySDJVTjVTRFQ3SWZJSUs3Zlg2eWd1bkp0eS1BVC1FMzRTM3JKY1lQR0FucHg2UXA5SzROcHpIQmp4RG1CNE9maVFVaE5mNVVPblRaNnNEbFBybS10RUpWUHNyTlRuZ1IwZ0lPY1VJczdvMDhVT0xZbnRnNkhtX1N5Z2ZwdXlsUi1kRnRUVHRKcGU3QnlHQjlMSFB1OFlCbDFwRy10UQ?oc=5 📰 Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5 📰 High-severity vulnerability in Linux caused by a single faulty character https://news.google.com/rss/articles/CBMitwFBVV95cUxOZ2VZLVl4SE0xZGxSTEZiOW1CNUpidHNhdVJmM1FOTlpHUWN3MXhoaUx4b2ZIS2RiYVl2RzV0OHViX3VBRW1YYmxBNlN2dTVXT0licTE1RlNRZDBBb0o3d1NRcWhFOUVfTDc5c3BjcUJfbGR2N2pqYUUxNmVoTEU2U0pRUkNPNEI1Sm1tU0RDZThocFB3ejdtU3IwbnFxT1Bqd0FoQXlQV2xFZVF5Tk92bmxrMVpRazA?oc=5 📰 Federal vulnerability management is stuck. A patch wave is coming anyway. https://news.google.com/rss/articles/CBMivwFBVV95cUxQb2JnZ1A3NDI3RUprVThsUUZKU2NiOUk5SVV1MW52cHltRkpSRTVZZTFnYzhRN2pPYXk3akJaVnhxUmVSV2VRbnc5V0wxVUNSeTBnLWg5WEw2Nm84bkhhU2RYMU1SOXB1X25Qa09KLVRydmM1S3lwN2hNT0JuQlhMdzM0cldUWFhwdDRBOWdHcllfMHRpTmtUZGwyTEpkbGVaa1VWRlpsU2pFTXVUam92X1M5UENDNkJ0cE1ReHNqaw?oc=5 📰 Update Chrome: Google patches actively exploited vulnerability and 73 others https://news.google.com/rss/articles/CBMivwFBVV95cUxQV0xrX1MtYWV3aFdKWWlTa1ZEN2dmaGozRnI3Ym5iei0tc0JHT2g5UFBuR3lZOHk1SVNSbUpqVDNWVzlHTmZ6elZKWEFyem8ycWNITERjQzBBeElZQ25QX0lDaUJyNU8waG9GZVM1V05NbmxKcUZtZTZIZ1pkZHd3YlZmajZtdVU2NzhWT3U0V1A5MTQ0UmdvT2RtVk9tcGVhcFBqaWN5S3dLb1BVLVd1Z1dQMXRmSHlOZHVBT0FMcw?oc=5 💡 Default creds are still the #1 initial access vector. Change them. ⚡ _VulnOps · AI-Powered Security_
258
10
🖼️ Daily Cybersecurity Meme ""WE FOLLOW OWASP BEST PRACTICES"" ""We FoLlOw OwAsP bEsT pRaCtIcEs""
🖼️ Daily Cybersecurity Meme ""WE FOLLOW OWASP BEST PRACTICES"" ""We FoLlOw OwAsP bEsT pRaCtIcEs""
221
11
🖼️ Daily Cybersecurity Meme "STARTUP: "WE'RE TOO SMALL" "TO BE HACKED, NO ONE CARES"" "NARRATOR: They were, in fact, already
🖼️ Daily Cybersecurity Meme "STARTUP: "WE'RE TOO SMALL" "TO BE HACKED, NO ONE CARES"" "NARRATOR: They were, in fact, already hacked"
236
12
Cybersecurity_for_SCADA_Systems-.pdf
261
13
+1
Bug Bounty from Scratch.pdf
281
14
#DevOps #Tech_book #Cyber_Education "Fundamentals of DevOps and Software Delivery: A Hands-On Guide to Deploying and Managing Software in Production", 2025. ]-> Code samples
296
15
#AppSec #Threat_Research 1⃣ Click Or Trick (CVE-2025-59199): Escaping the Sandbox with Windows URIs https://www.safebreach.com/blog/click-or-trick-cve-2025-59199-escaping-the-sandbox-with-windows-uris 2⃣ Adobe Acrobat Reader Escript.api UAF RCE https://blog.exodusintel.com/2026/06/01/adobe-acrobat-reader-escript-api-use-after-free-remote-code-execution 3⃣ Exploiting Windows Defender's Remediation Workflow for LPE https://blog.calif.io/p/redsun-exploiting-windows-defenders
261
16
#AIOps "Hijacking Agent Memory: Stealthy Trojan Attacks Through Conversational Interaction", May 2026. // MemPoison - novel memory poisoning attack that bypasses selective memory mechanisms in LLM agents, where an attacker can inject triggerable backdoors into the agent's long-term memory through dialogue interactions, thereby misleading its subsequent responses
223
17
#Tech_book #Kernel_Security "Learning eBPF: Programming the Linux Kernel for Enhanced Observability, Networking, and Security", 2023. ]-> Repo
218
18
#SCA #Hardware_Security "FROST: Fingerprinting Remotely using OPFS-based SSD Timing", 2026. // SSD contention side channels can be mounted by a remote attacker from within the browser, without native code execution. FROST attack targets the Origin Private File System API in JavaScript, allowing us to create and access files on the disk, within the browser’s sandboxed environment
210
19
#exploit #Kernel_Security An AI audit of FreeBSD https://blog.calif.io/p/an-ai-audit-of-freebsd ]-> setcred (CVE-2026-45250) ]-> ptrace (CVE-2026-45253) ]-> procdesc (CVE-2026-45251) ]-> Bonus // Disclaimer
191
20
#AppSec #Threat_Research "Resolving the Correct Library: A Loader-Level Defense Solution Against Shared Object Hijacking", Jan. 2026. https://anonymous.4open.science/r/shareb_object_library_hijacking-5E36 // developed a loader-centric glibc prevention mechanism that enforces checking shared library identity at load time by binding dependencies to immutable build identifiers and cryptographic hashes
187