If you like bounties, I highly recommend this presentation from Martin Doyhenard on novel web cache deception techniques. It comes with Web Security Academy labs too!
www.youtube.com/watch?v=70yy...

I have created a Blue Sky starter pack for @OWASP associated people here. Let me know if you are an #OWASP chapter leader, project leader, committee member, staff member, volunteer, etc and you want to be added, DM me or respond here.

go.bsky.app/Ks4c9Va

Yesterday my first PHP CVE was published: CVE-2024-11234. In some specific configurations, this vulnerability could allow for CRLF injection when using stream contexts.
sec.leonardini.dev/blog/cve-202...

Many thanks to @minimalblue.bsky.social for reviewing my original report

[Mario Kart 8 Deluxe]

Here's more info on the security vulnerability that was fixed in version 3.0.3. (The bug was responsibly disclosed to Nintendo and the researchers are now allowed to talk about their findings.)

A full write-up is available here: 🔗 github.com

🐦 original post

Does anyone want to spend Friday having lots of fun? Here's your chance - ctf.patchstack.com, #CTF challenge organized by @patchstack.com, but all challenges are made by the Patchstack Alliance community of #ethical #hackers, #security #researchers, and #developers 🤩 Of course, there are prizes! 🤑