CoreEvent GraphQL API – BOLA/IDOR exposing 10k+ records (PII, ticket QR codes) via unauthenticated queries

EU CRA mandatory vulnerability reporting enters into force September 11, 2026 — what the 24-hour obligation requires

Interesting- What LLM vuln research looks like

Using AI to Secure Its Generated Code Is a Ponzi Scheme

Digital Trap: Iran Uses Selective Internet Restoration to Track and Arrest January Protesters

A practical checklist for evaluating npm packages (supply chain attacks, slopsquatting, etc.)

OffensiveCon26 YouTube Playlist released