Amazon Q: Now with Helpful AI-Powered Self-Destruct Capabilities
Source: https://www.lastweekinaws.com/blog/amazon-q-now-with-helpful-ai-powered-self-destruct-capabilities/
Attacking GenAI applications and LLMs - Sometimes all it takes is to ask nicely!
Source: https://security.humanativaspa.it/attacking-genai-applications-and-llms-sometimes-all-it-takes-is-to-ask-nicely/
Struts Devmode in 2025? Critical Pre-Auth Vulnerabilities in Adobe Experience Manager Forms
Source: https://slcyber.io/assetnote-security-research-center/struts-devmode-in-2025-critical-pre-auth-vulnerabilities-in-adobe-experience-manager-forms/
Deepfakes, Vishing, and GPT Scams: Phishing Just Levelled Up
Source: https://open.substack.com/pub/alex133134/p/deepfakes-vishing-and-gpt-scams-phishing?r=625rp3&utm_medium=ios&utm_source=post_stats
Just published a new write-up where I walk through how a small HTTP method misconfiguration led to admin credentials being exposed.
It's a simple but impactful example of why misconfigurations matter.
📖 Read it here: [https://is4curity.medium.com/admin-emails-passwords-exposed-via-http-method-change-da23186f37d3](https://is4curity.medium.com/admin-emails-passwords-exposed-via-http-method-change-da23186f37d3)
Let me know what you think — and feel free to share similar cases!
\#bugbounty #infosec #pentest #writeup #websecurity
\#️⃣ How we Rooted Copilot #️⃣
After a long week of SharePointing, the [Eye Security](https://www.linkedin.com/company/eyesecurity/) Research Team thought it was time for a small light-hearted distraction for you to enjoy this Friday afternoon.
So we rooted Copilot.
It might have tried to persuade us from doing so, but we gave it enough ice cream to keep it satisfied and then fed it our exploit.
Read the full story on our research blog - [https://research.eye.security/how-we-rooted-copilot/](https://research.eye.security/how-we-rooted-copilot/)
New Advanced Stealer (SHUYAL) Targets Credentials Across 19 Popular Browsers
Source: https://hybrid-analysis.blogspot.com/2025/07/new-advanced-stealer-shuyal-targets.html
Mateusz Lewczak explains how the AFD.sys driver works under the hood on Windows 11. In Part 1 [1], he demonstrates how to use WinDbg and the NtCreateFile call to manually craft a raw TCP socket, bypassing the Winsock layer entirely.
Part 2 of the series [2] dives into the bind and connect operations implemented via AFD.sys IOCTLs. Mateusz shows how to intercept and analyze IRP packets, then reconstruct the buffer needed to perform the three‑way TCP handshake by hand in kernel mode.
[1] https://leftarcode.com/posts/afd-reverse-engineering-part1/
[2] https://leftarcode.com/posts/afd-reverse-engineering-part2/
