Passkeys – Under the Hood(research.kudelskisecurity.com)

140 points by paulgerhardt 2 years ago | 69 comments

Cascade: CPU fuzzing via intricate program generation(comsec.ethz.ch)

152 points by matt_d 3 years ago | 17 comments

How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)

657 points by spiridow 1 year ago | 219 comments

Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.

Apple Security Research Device(security.apple.com)

160 points by neom 2 days ago | 99 comments

Apple's program page for the Security Research Device, a specially fused iPhone loaned to qualified researchers for iOS security research, with guidelines and application details.

TernFS – An exabyte scale, multi-region distributed filesystem(xtxmarkets.com)

229 points by rostayob 1 year ago | 93 comments

Scamlexity: When agentic AI browsers get scammed(guard.io)

194 points by mindracer 1 year ago | 166 comments