We are excited to announce a new release of our Burp Suite Extension - InQL v6.1.0! The complete re-write from Jython to Kotlin in our previous update (v6.0.0) laid the groundwork for us to start implementing powerful new features, and this update delivers…

A journey of learning C and reverse engineering to be more efficiently lazy

Complete Android application security testing guide: Static & dynamic testing, root detection bypass, SSL pinning, and common vuln…

React2Shell (CVE-2025-55182) is a critical RCE vulnerability in React Server Components. Learn which versions are impacted and how to mitigate.

Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead Android uses the best of Goo...

A novel and powerful twist on an old classic.

AI-driven GitHub Actions expose new prompt-injection supply chain vulnerabilities.

What's Changed
✨ New Features

Write resume file specified by flag by @circleous (#6616)
Javascript Multi-Port Support by @pussycat0x (#6501)
Direct fuzzing using target URL for OpenAPI/Swagger...

Arista NG Firewalls: researchers confirm real-world RCE risk and incomplete patches. Learn impact, affected setups, and mitigation steps.

Enhance compliance and security with the new audit logs for SonarQube Cloud Enterprise plan. Get a chronological record of key IAM events, accessible via API to integrate with your SIEM tools.

See how prompt injection attacks work in ServiceNow to perform unauthorized actions, and how to defend against it with AppOmni AgentGuard.

What it is, who is vulnerable, recommendations, and Intigriti insights.

SonarQube has emerged as a leading automated code review platform that empowers development teams to achieve a high level of code quality and code security.

This guide is designed to demystify PyTorch's core components, providing you with a solid understanding of how it empowers the creation and training of sophisticated machine learning models.

Updated and latest information regarding the critical React RCE vulnerability (React2Shell CVE-2025-55182) . Learn how to detect and protect with JFrog.

We're excited to announce Tracebit Community Edition, a completely free-forever platform to deploy security canaries.

Model Context Protocol connects LLM apps to external data sources or tools. We examine its security implications through various attack vectors.

Posted by Nathan Parker, Chrome security team Chrome has been advancing the web’s security for well over 15 years, and we’re committed to...

Posted by Chrome Root Program Team Secure connections are the backbone of the modern web, but a certificate is only as trustworthy as the...

A privilege escalation flaw in the Soledad theme allowed Subscribers to change site settings and gain admin access. Learn how it works and why updating to 8.6.9.1 is essential.