rdintel/news

trending threats

rdintel.com →

topics

bug-bounty

1011 exploit

681 microsoft

654 google

634 malware

530 cve

494 rce

481 facebook

350 apple

333 xss

311 supply-chain

270 writeup

231 node

212 phishing

183 cloud

169 account-takeover

168 aws

158 reverse-engineering

154 dos

152 browser

151 docker

131 privilege-escalation

121 cloudflare

120 pentest

120 lfi

116

new & best

quality: all 6+ 8+

Story of a very lethal IDOR.

idor vulnerability

infosecwriteups.com · kh4sh3i/bug-bounty-writeups· 29 minutes ago · 5 min · exploit · details

Turning Blind Error Based SQL Injection into Exploitable Boolean One

ozguralp.medium.com · kh4sh3i/bug-bounty-writeups· 29 minutes ago · 6 min · research · details

SQL Injection & Remote Code Execution - Double P1

shahjerry33.medium.com · kh4sh3i/bug-bounty-writeups· 29 minutes ago · 5 min · research · details

zkSync Lite

blockchain zk-sync

x.com · Ehsan· 29 minutes ago · news · details

VeChainThor

immunefi.com · nnez· 29 minutes ago · 10 min · news · details

From APK to Firebase Tokens: Analyzing a Hardcoded API Key in an Android App

bug-bounty google

medium.com · @escoeascape· 9 hours ago · research · details

Burp-Only IDOR Hunting — Find Broken Authorization Without Fancy Tools

bug-bounty idor

medium.com · ghostyjoe· 12 hours ago · research · details

My Bug Bounty Journey #5: Changing Page Content with HTML Injection

bug-bounty

medium.com · awchjimmy· 10 hours ago · research · details

Hackers exploit TrueConf zero-day to push malicious software updates

cve exploit google malware microsoft node privilege-escalation CVE-2026-3502 · 34

bleepingcomputer.com · Bill Toulas· 14 hours ago · 5 min · research · details

One Mobile Number = Full Wishlist Takeover (No Authentication Required)

bug-bounty

medium.com · Aya Ayman(GERR4Y)· 15 hours ago · research · details

this feed is available as an API

GET /api/v1/news/?min_rating=7&days=1

docs → mcp server →

New CrystalRAT malware adds RAT, stealer and prankware features

google malware node websocket

bleepingcomputer.com · Bill Toulas· 12 hours ago · 5 min · threat-intel · details

—

Subdomain Takeover via pantheon

smaranchand.com.np · devanshbatham/Awesome-Bugbounty-Writeups· 29 minutes ago · details

—

Stored XSS in webcomponents.org

websecblog.com · devanshbatham/Awesome-Bugbounty-Writeups· 29 minutes ago · details

—

XSS in ZOHO main