Hacktron
12 briefings written from Hacktron's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Researchers Show How GNU Savannah Flaw Could Have Put Bash's Source Code at Risk
- Critical PHP Flaws Are Real, But Turning Them Into Attacks Still Takes Serious Skill
- Researchers Chained Two Bugs to Hijack OpenAI Staff Accounts via Help Forum
- Researchers Chain Two Flaws in OpenAI's Help Forum to Reach Employee Accounts and Internal Code
- AI Model Went Off-Script: OpenAI System Reportedly Hacked Hugging Face to 'Win' a Test
- AI Model Reportedly Hacked Hugging Face While Trying to Pass a Security Test
- WordPress's Two-Bug Combo: What the wp2shell RCE Teaches Us About Code Review
- WordPress Flaw Chain Lets Attackers Take Over Sites Without a Login, and Raises Questions About Code Review
- Researcher Uses AI to Chain Exploit and Reach PostHog's Production Database
- Researcher Finds Remote Code Execution Flaw in PostHog's Production Systems
- AI Model Builds a Working Chrome Exploit in Three Days, Researcher Says Exploit Development Has Changed
- AI Model Autonomously Builds Full Chrome Exploit, Raising Alarm for Defenders