rdintel/news

topics

new & best

quality: all 6+ 8+

HK police can now demand phone passwords under new national security rules

google

bbc.com · jen729w· 13 days ago · 3 min · news · details · hn 4

The Zero-Code Security Team: Shifting Left with Prompt-Native AI Agents

auth-bypass facebook

godaddy.com · nitishagar· 13 days ago · 16 min · tool · details · hn 1

Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly

cve google web3

research.google · madars· 13 days ago · 7 min · research · details · hn 86

Supply Chain attack on Axios NPM Package

node supply-chain

gist.github.com · JACOBSMILE1· 13 days ago · news · details

PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research. It allows the operator to produce custom DNS responses, making it suitable for in-depth DNS protocol testing purposes.

pentest

github.com · BlueEyedCat2026· 13 days ago · 11 min · tool · details

DISKO 4… picoCTF

picoctf discovery

medium.com · Configx· 6 days ago · tutorial · details

I Built a Security Scanner That Goes Beyond Regex — Here’s Why (and How)

bug-bounty pentest

medium.com · Parag Bagade· 13 days ago · research · details

Vibe Security Radar: Real CVEs where AI-generated code introduced Bugs

auth-bypass cloud cors cve dos exploit lfi rce ssrf xss CVE-2026-22171 · 33 CVE-2026-30924 · 3 CVE-2026-31989 · 29 CVE-2026-31990 · 24 CVE-2026-31998 · 35 CVE-2026-32021 · 26 CVE-2026-33331 · 36 CVE-2026-3503 · 2 CVE-2026-4269 · 29

vibe-radar-ten.vercel.app · tsgates· 16 days ago · 4 min · research · details · hn 4

CrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Root

cve dos exploit kubernetes microsoft privilege-escalation rce CVE-2026-23268 · 32 CVE-2026-23269 · 29

blog.qualys.com · type0· 16 days ago · 19 min · research · details · hn 2

Malicious IoliteLabs VSCode Extensions Target Solidity Developers with Backdoor

apple facebook microsoft node supply-chain web3

stepsecurity.io · kurmiashish· 16 days ago · 32 min · research · details · hn 2

this feed is available as an API

GET /api/v1/news/?min_rating=7&days=1

docs → mcp server →

From static findings to runtime exploits: testing 6 popular MCP servers

docker

agentseal.org · Resham_Joshi· 13 days ago · research · details · hn 3

Research game measuring how humans detect AI-generated phishing emails

phishing

github.com · serious_angel· 13 days ago · 5 min · research · details · hn 2

From Zero to Bug Bounty Hunter in 59 Days (Day 01)

bug-bounty

hamim-islam-17.medium.com · Hamim Islam· 4 days ago · tutorial · details

Guía Completa de Path Traversal: Fundamentos, Explotación y Mitigación

bug-bounty lfi

medium.com · JPablo13· 13 days ago · tutorial · details

Zero Day Exploit in Telegram

apple exploit facebook google

zerodayinitiative.com · abracos· 16 days ago · 45 min · exploit · details · hn 4

Backdoored Telnyx PyPI package pushes malware hidden in WAV audio

apple docker facebook kubernetes malware microsoft node supply-chain

bleepingcomputer.com · Bill Toulas· 16 days ago · 5 min · news · details

AI bug reports went from junk to legit overnight, says Linux kernel czar

facebook google microsoft

theregister.com · amarant· 16 days ago · 11 min · research · details · hn 58

The SEO parasites buying, exploiting and ultimately killing online newsbrands

exploit google web3

pressgazette.co.uk · thm· 16 days ago · 10 min · news · details · hn 4

Installing arbitrary (and potentially lethal) firmware on a Zero Motorcycle

google malware supply-chain

persephonekarnstein.github.io · alberto-m-dev· 16 days ago · 51 min · research · details

Leveling Up Secure Code Reviews with Claude Code

aws deserialization exploit microsoft pentest race-condition react ssrf websocket

specterops.io · vinhnx· 13 days ago · 23 min · research · details · hn 2

Freedom Studio – local AI runner with Tor, E2E encryption, and zero telemetry

freedom-studio local-ai tor encryption

github.com · Tijunelis· 13 days ago · 12 min · tool · details · hn 1

Boltcli – Bolt Food orders from the terminal (reverse-engineered API)

reverse-engineering

github.com · Lukynnnn· 13 days ago · tool · details · hn 1

OpenAI Codex: How a Branch Name Stole GitHub Tokens

apple aws browser bug-bounty cve google microsoft oauth rce xss CVE-2026-22708 · 32 CVE-2026-26268 · 28

blog.barrack.ai · LostPrune2143· 13 days ago · 14 min · research · details

RE//verse 2026: Hacking the Xbox One by Markus 'doom' Gaasedelen

hacking xbox-one

youtu.be · scottyMo221· 13 days ago · research · details

Identifying the AWS account ID from a public S3 bucket

aws bug-bounty cloud

medium.com · Ronaldsecurit· 13 days ago · 5 min · research · details

QBDI vs TritonDSE against a VM: who will be the fastest?

qbdi tritondse vm

blog.quarkslab.com · Laurent Laubin· 13 days ago · research · details

ZDI-CAN-30207: Unpatched 9.8 RCE zero-day in Telegram

apple facebook google rce

zerodayinitiative.com · km· 16 days ago · 45 min · news · details · hn 7

AI bug reports went from junk to legit overnight, says Linux kernel czar

microsoft

github.blog · amarant· 16 days ago · 13 min · research · details · hn 2

The Ultimate Bug Bounty Course: From Zero to Advanced Hacker 7

bug-bounty

medium.com · Dasiel Ramirez Hernandez· 16 days ago · 6 min · tutorial · details

Ask HN: Why are people buying GitHub repositories?

github software-as-a-service

acheong08· 4 days ago · news · details · hn 3

page 81 of 922

← prev next →

news.rdintel.com · api · mcp · rdintel.com