theyhack.bsky.social
infosec | security research: https://theyhack.me/cve/ Opinions are mine.
👤 Joined on 04 December 2024
Followers
Following
Total Posts
@theyhack.bsky.socialAI is accelerating vulnerability discovery. But how many new CVEs pose a realistic threat? Nate Robb and Bishop Fox TEA investigated four widely publicized Nginx vulnerabilities and found that all required uncommon configurations. The findings challenge some alarming headlines.
Show Post@Jon Williams gave an AI-powered vulnerability research lab raw UniFi firmware. It helped take the research all the way to a working unauthenticated exploit. This week at Ekoparty, Jon is demoing the takeover live and sharing where the AI worked and where it fell flat.
Show PostFinding more vulnerabilities doesn't help much if you can't really tell what matters. Ori Zigindere explains CTEM and how continuous scoping, prioritization, validation, and remediation can turn an endless backlog into actual risk reduction.
Show PostAs promised, here's our walkthrough of CVE-2026-93616, an unauthenticated root RCE affecting Check Point Security Management and Multi-Domain Management servers! bishopfox.com/blog/weaponi...
Show Post"I wrote a Skill for that" Yo, you wrote detailed documentation in a markdown file is what you did. How come you couldn't do that before now?
Show Post