Category
Web Security
3 posts in this category.
GitHub Issue to Supply Chain Compromise: How Prompt Injection Turned AI Agents into the New CI/CD Kill Chain
When a single GitHub issue can poison an AI agent, steal pipeline credentials, and publish malicious packages to production registries — all without a single binary payload.
Weaponizing Secure Email Gateways: When the Sandbox Clicks for the Attacker
When the SEG's sandbox click triggers real actions, the defender becomes the attacker's proxy.
The Treasure of Finding Vulnerabilities: A Researcher's Guide to Secure Code Review
A risk-based methodology for finding the vulnerabilities that scanners and pentests miss.