AI and the growing ecosystem of tools built around it have now moved beyond early experimentation and into everyday use across the bug bounty community.

What's Changed
Security Fixes

JS: Respect allow-local-file-access in require by @dwisiswant0 (#7332)

CVE-2026-41646 - GHSA-29rg-wmcw-hpf4


Expressions: Only evaluate template-authored expres...

A one-line fallback in DOMPurify's config parser inherits from Object.prototype — turning any existing prototype pollution vulnerability into a full XSS bypass. Affects versions 3.0.1 through 3.3.3 with default configuration.

The age of AI-powered/supported hackers is upon us, and the impact is clear. See how AI technology is being used by security researchers, with insights from industry expert.

Trailmark turns source code into a security-analysis graph, powering eight Claude Code skills for blast radius, taint propagation, and mutation test triage.

We initiated a broad sweep of the public web to monitor for known indirect prompt injection patterns. This is what we found.

Hi hackers,   Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring:   Compromising an NPM package with 40M weekly downloads Bypassing Cloudflare WAF for a full ATO 20-...

Since the launch of Neo, we've been steadily expanding what it can do. Neo has found 33+ real CVEs across open-source projects, performed well on white-box security testing where source code is available, and generally proven itself as a capable security…

New research from ProjectDiscovery surfaces an uncomfortable truth: Engineering has accelerated, and Security has been left to absorb the impact, mostly by hand.

If you work in application security right now, you already know the shape of the problem. Pull…

We added LibAFL support to Ruzzy, our coverage-guided fuzzer for pure Ruby code and Ruby C extensions. This gives Ruby developers and security researchers access to a more advanced and actively maintained fuzzing engine without changing how they write their…

Copy Fail (CVE-2026-31431) turns a Linux AF_ALG flaw into a 4-byte page cache write and local root across major Linux distributions and cloud platforms. | AI f…

From scan to fix, seamlessly. Claude scans your codebase for vulnerabilities, validates findings, and recommends patches you can review and approve.

Learn how to identify and exploit SQL injection vulnerabilities using several different testing methods. Read the article now!

How a single SVG file can achieve arbitrary file write (and RCE) by chaining weak default policies in ImageMagick with vulnerabilities in Ghostscript 10.06.0, completely bypassing GS SAFER mode.

What's Changed
Security Fixes

JS: Respect allow-local-file-access in require by @dwisiswant0 (#7332)

CVE-2026-41646 - GHSA-29rg-wmcw-hpf4


Expressions: Only evaluate template-authored expres...

Working with Vercel Team to Keep the Internet Secure from React2Shell

After a small detour, the CloudSecTidbits series is back with new episodes. We had the opportunity to present them at the first DEFCON in Singapore few days ago during our DemoLabs sessions. Meeting Singapore’s community was indeed amazing - thanks again…

Here is a walkthrough of our solutions to two C/C++ security challenges from the new C/C++ chapter in the Testing Handbook: a Linux ping program with an inet_ntoa global buffer gotcha and command injection, and a Windows driver with registry type confusion…