Recent Posts

• Remote Prompt Injection in Gitlab Duo Leads to Source Code Theft
  by chillaxon 5/23/2025, 7:12:33 AM with 10 comments
• GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents
  by chillaxon 3/19/2025, 7:47:06 AM with 0 comments
• Azure's Weakest Link? How API Connections Spill Secrets
  by chillaxon 3/11/2025, 9:54:39 AM with 0 comments
• 8M Requests Later,We Made the SolarWinds Supply Chain Attack Look Amateur
  by chillaxon 2/6/2025, 12:09:22 PM with 0 comments
• Top web hacking techniques of 2024
  by chillaxon 2/5/2025, 12:47:47 PM with 0 comments
• Stealing HttpOnly cookies with the cookie sandwich technique
  by chillaxon 1/23/2025, 10:10:23 AM with 0 comments
• Backdooring Your Backdoors – Another $20 Domain, More Governments
  by chillaxon 1/8/2025, 8:37:29 PM with 1 comment
• September 2024 Progress Update on Microsoft's Secure Future Initiative (SFI)
  by chillaxon 9/25/2024, 12:49:46 PM with 1 comment
• Hello eBPF: Building a Fast Firewall with Java and eBPF (14)
  by chillaxon 8/27/2024, 2:58:47 PM with 0 comments
• Listen to the whispers: web timing attacks that work
  by chillaxon 8/7/2024, 7:28:47 PM with 0 comments
• Single-packet race condition breaking the 65535 byte lim
  by chillaxon 8/5/2024, 9:09:04 AM with 9 comments
• Ducks Now Sitting (DNS): Internet Infrastructure Insecurity
  by chillaxon 8/2/2024, 12:29:32 PM with 0 comments
• Exploiting Client-Side Path Traversal to Perform CSRF – Introducing CSPT2CSRF
  by chillaxon 7/3/2024, 7:50:55 AM with 0 comments
• Phantom Secrets: Undetected Secrets Expose Major Corporations
  by chillaxon 7/2/2024, 12:14:48 PM with 0 comments
• Encryption at Rest: Whose Threat Model Is It Anyway?
  by chillaxon 6/4/2024, 11:25:18 AM with 25 comments
• GitHub Self-Service Automation: Introduction to Repoman and Release
  by chillaxon 5/2/2024, 7:42:31 AM with 0 comments
• Java Scoped Values: Better ThreadLocals
  by chillaxon 4/24/2024, 12:48:18 PM with 0 comments
• HTTP/2 Continuation Flood
  by chillaxon 4/4/2024, 12:00:19 PM with 0 comments
• Kobold letters: HTML emails are a risk
  by chillaxon 4/4/2024, 10:27:19 AM with 25 comments
• ArchiveME - Digital Twin
  by chillaxon 3/4/2024, 7:45:46 PM with 0 comments
• MavenGate: A supply chain attack method for Java and Android applications
  by chillaxon 1/23/2024, 2:27:55 PM with 1 comment
• Google OAuth is broken (sort of)
  by chillaxon 12/20/2023, 1:00:18 PM with 0 comments
• SMTP Smuggling – Spoofing Emails Worldwide
  by chillaxon 12/18/2023, 11:43:15 AM with 0 comments
• Distribution Confusion in PyPI
  by chillaxon 9/21/2023, 9:41:53 AM with 0 comments
• Slack
  by chillaxon 4/4/2023, 8:26:40 PM with 0 comments
• Samsung Galaxy, Google Pixel zero days
  by chillaxon 3/17/2023, 8:24:31 AM with 0 comments
• How to start with tight-loose-tight leadership
  by chillaxon 3/10/2023, 8:56:58 PM with 0 comments
• CorePlague: Severe Vulnerabilities in Jenkins Server Lead to RCE
  by chillaxon 3/8/2023, 7:03:45 PM with 0 comments
• Google opens Bard chatbot to test users, plans more AI for search
  by chillaxon 2/6/2023, 7:12:31 PM with 0 comments
• Azure Security Survival Kit
  by chillaxon 1/11/2023, 9:52:39 AM with 0 comments
• Putin grants Russian citizenship to U.S. whistleblower Snowden
  by chillaxon 9/26/2022, 4:27:56 PM with 0 comments
• DNS Reaper – subdomain takeover vuln. scanner
  by chillaxon 8/3/2022, 9:14:52 AM with 0 comments
• Public Travis CI Logs (Still) Expose Users to Cyber Attacks
  by chillaxon 6/14/2022, 10:49:58 AM with 0 comments
• Confluence Unauthenticated RCE
  by chillaxon 6/3/2022, 4:15:58 AM with 0 comments
• Spring RCE Confirmed
  by chillaxon 3/30/2022, 8:02:50 PM with 1 comment
• Possible Spring core RCE
  by chillaxon 3/30/2022, 6:00:41 AM with 13 comments
• Lapsus$ hackers leak 37GB of Microsoft's alleged source code
  by chillaxon 3/22/2022, 7:52:53 AM with 17 comments
• ADPC a Human-Centric and Enforceable Privacy Specification
  by chillaxon 6/14/2021, 7:38:07 AM with 0 comments
• Amazon manipulates customers to stay subscribed
  by chillaxon 1/15/2021, 12:30:10 PM with 0 comments