Netsec

I went looking for a managed-Postgres provider. Instead, I found a vulnerability in a 4-star PostgreSQL extension available everywhere! and turned it into code execution at NeonDB, Supabase, Xata and many other PostgreSQL service companies https://ift.tt/DPo4rO9 Submitted 2026-08-14T19:43:10Z by wtfse via reddit https://ift.tt/etZv5JV

Our AI pentesting engine talked a production AI agent's prompt-injection guardrail into handing over its entire system prompt on its second attempt. https://ift.tt/u2VrQCd Submitted 2026-08-14T17:01:27Z by PriorPuzzleheaded880 via reddit https://ift.tt/v8MhVLi

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?)) - watchTowr Labs https://ift.tt/o6GuSYV Submitted 2026-08-14T07:10:17Z by dx7r__ via reddit https://ift.tt/Gvno0eD

Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam https://ift.tt/pkERxb0 Submitted 2026-08-14T04:46:39Z by AnimalStrange via reddit https://ift.tt/a5S8DBA

When You Pay the Ransom - Taking Apart an Interlock ESXi Decryptor | Maldbg https://ift.tt/249rCw7 Submitted 2026-08-13T20:51:00Z by tohitsugu via reddit https://ift.tt/wJZAxtm

CSS:the bomb inside your inbox https://ift.tt/JXyDFen Submitted 2026-08-13T20:15:35Z by garethheyes via reddit https://ift.tt/lSf1q3X

From Unauthenticated API to Grid Risk: A Hybrid Inverter Vulnerability Explained https://ift.tt/W6t4852 Submitted 2026-08-13T15:20:01Z by _solid_snail via reddit https://ift.tt/osCHpLB

Can AI do novel security research? Meet the HTTP Terminator https://ift.tt/rpFZhQT Submitted 2026-08-13T12:19:41Z by albinowax via reddit https://ift.tt/6CGrJES

A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months https://ift.tt/TtI8wS7 Submitted 2026-08-13T11:30:21Z by Turbulent_Owl_5691 via reddit https://ift.tt/ovluJkc

Two Parsers, One JSON and a Flag: Intigriti's July 2026 Challenge https://ift.tt/yCEnaJK Submitted 2026-08-13T09:08:55Z by Low-Egg-6764 via reddit https://ift.tt/2vClgL1

ERPNext's Document Follow feature exposed unauthorized data https://robinroy.xyz/blog/frappe-document-follow-vulnerability/ Submitted August 12, 2026 at 02:53PM by TeraTrox_ via reddit https://ift.tt/hATJG3f

GhostSplice: Malicious MCP Servers Split Instructions to Make AI Coding Agents Exfiltrate Secrets (ASSET Research Group) https://asset-group.github.io/disclosures/ghostsplice/ Submitted August 12, 2026 at 05:44AM by Altruistic_Hope_2559 via reddit https://ift.tt/kvFYnf2

Expired DMARC reporting endpoint exposed a NYSE Fortune 1000's infrastructure for $10 https://ift.tt/orqVKdh Submitted August 12, 2026 at 01:53AM by PlasmaJam via reddit https://ift.tt/1JLC8s7

CopyEscape: Container-to-host arbitrary file write via docker cp (CVE-2026-17106) https://ift.tt/TJsZL5B Submitted August 11, 2026 at 09:03PM by ronmasas via reddit https://ift.tt/W45vYeh

ETW for Security Research: Providers, Sessions, and Detection Engineering https://idov31.github.io/posts/inside-etw-with-etwsuite Submitted August 11, 2026 at 07:52PM by Idov31 via reddit https://ift.tt/hqyV62S

SMAP is Pre-Disarmed: How a Stack Pivot That Shouldn't Work Revealed a Kernel-Wide Design Compromise https://ift.tt/9wJAD7H Submitted August 11, 2026 at 04:16PM by Important_Map6928 via reddit https://ift.tt/Aeb75tP

Mandatory User Profile for Persistence & EDR Evasion https://ipurple.team/2026/08/11/mandatory-user-profile/ Submitted August 11, 2026 at 01:50PM by netbiosX via reddit https://ift.tt/PHek4A0

Inside a Russian-speaking operator's toolkit for compromising Ukrainian IP cameras https://ift.tt/tfeoPMd Submitted August 11, 2026 at 12:11AM by Straight-Practice-99 via reddit https://ift.tt/0rjL39p

Beyond Prompt Injection: Hacking Apple's Private Cloud Compute https://ift.tt/3wZvSnp Submitted August 10, 2026 at 03:03AM by smaury via reddit https://ift.tt/KI3d7vL

HTTP/3 Trailer HEADERS Frame Triggers Unhandled Exception in Google ESF: 60s Hang & QUIC INTERNAL_ERROR 0x0001 | Protocol RE | Netacoding https://ift.tt/iuB1nW0 Submitted August 10, 2026 at 01:18AM by Pale_Surround_3924 via reddit https://ift.tt/hy14mVo