Month: August 2026

Hacking Google with A.I. for $500,000

by

Author: Arvin Shivram (brutecat) Published: June 11, 2026 Source: https://brutecat.com/articles/hacking-google-with-ai/ Summary Security researcher brutecat (Arvin Shivram) documents a large-scale campaign that used an LLM-driven fuzzing pipeline to systematically probe roughly 1,500 of Google’s internal and external APIs with about 3,600 collected API keys, uncovering a series of access-control, authentication, and data-exposure flaws that earned a … Read more

Apache Struts 2: RestfulActionMapper OGNL Injection Unauthenticated Root RCE

by

Author: 0day Rubbish Research Team (advisory produced by an automated multi-LLM ensemble — the project credits Claude, OpenAI, DeepSeek, and GLM) Published: 2026-08-02 Source: https://0day-rubbish.com/blog/apache-struts2-restful-mapper-ognl-rce Summary An advisory from the 0day Rubbish project reports an unauthenticated remote code execution chain in Apache Struts 2 6.11.0 (and earlier 6.x releases that have not enabled the new … Read more

An HTTP Intercepting Proxy with Chrome DevTools Protocol (CDP)

by

Author: Denis Andzakovic Published: July 29, 2026 Source: https://pulsesecurity.co.nz/articles/glorp-cdp-support Summary Pulse Security’s Denis Andzakovic describes a new logging mode added to Glorp, an open-source HTTP intercepting proxy, that captures browser traffic using the Chrome DevTools Protocol (CDP) instead of a traditional man-in-the-middle setup. Rather than terminating TLS via an HTTP CONNECT tunnel and a trusted … Read more

Apple Screen Sharing Pre-Auth RCE

by

Author: warez.sl0p.foo (advisory autonomously generated and validated by AI coding agents) Published: 2026-08-01 (correction published 2026-08-02) Source: https://warez.sl0p.foo/apple-screensharing-rce/ Summary An advisory published on warez.sl0p.foo describes a pre-authentication flaw in the macOS Screen Sharing daemon (screensharingd) that, according to the authors, allows an unauthenticated network attacker to bypass Secure Remote Password (SRP) authentication and reach the … Read more