Passkeys – Under the Hood(research.kudelskisecurity.com)

140 points by paulgerhardt 2 years ago | 69 comments

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)

657 points by spiridow 1 year ago | 219 comments

Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.

Cryptographic Issues in Cloudflare's Circl FourQ Implementation (CVE-2025-8556)(botanica.software)

156 points by botanica_labs 1 year ago | 70 comments

Branch Privilege Injection: Exploiting branch predictor race conditions(comsec.ethz.ch)

397 points by alberto-m 1 year ago | 177 comments

ETH Zurich COMSEC research page on Branch Privilege Injection, a class of Intel CPU vulnerabilities exploiting branch predictor race conditions to leak privileged memory.

ASP.NET Security Feature Bypass Vulnerability(nvd.nist.gov)

77 points by zeraye 1 year ago | 50 comments

Unauthenticated Remote Code Execution in Erlang/OTP SSH(nvd.nist.gov)

183 points by kimi 1 year ago | 48 comments