@intelliflame.bsky.socialSix phases, one pipeline: Recon → Discovery → Strategy → Exploit → Validate → Report AI forms the hypotheses. Real tools validate — every finding ships with evidence. github.com/BugTraceAI #infosec #bugbounty #pentesting #agenticAI
@yogsec.bsky.socialBug Bounty Tip: JWT Algorithm Confusion
Look for:
Authorization: Bearer eyJ... or session cookies storing JWTs.
Test by changing the header to {"alg":"none"}, or switching RS256 → HS256.
For more tips join Telegram: t.me/bugbountyusa
@codingtx.bsky.socialCiberseguridad en el sector energético
#seguridadinformatica #ciberseguridad #ethicalhacker #sistemas #codingt #socanalyst #bugbounty #redes #telecomunicaciones #estandares #isaca #codingt #ethicalhacker
@animalversenews.bsky.socialXRP Ledger patches decade-old bug that could have minted trillions of XRP
animalverse.social/community/p/...
#XRP #XRPL #Ripple #XRPledger #BlockchainSecurity #CryptoVulnerability #SecurityPatch #AIAgents #BugBounty #CryptoNews
@hasamba72.bsky.socialclaude-bughunter: 83 Claude Code skills for bug hunting and red-team work. 681 HackerOne report patterns, enterprise CVE chains (M365/Entra, Okta, vCenter), triage and reporting with VRT severity. #tool #BugBounty #ClaudeCode https://github.com/elementalsouls/Claude-BugHunter
@techpulse01239.bsky.social⚠️ Google pauses new product reports in its Open Source Software Vulnerability Reward Program after a flood of mostly invalid AI-generated submissions.
Full context on TechPulse:
tech-blog-eight-blush.vercel.app/posts/2026-1...
@simsus.social.tchncs.de.ap.brid.gy#Google :google: stellt #BugBounty-Programm für #OpenSource vorerst ein | Security https://www.heise.de/news/Google-stellt-Bug-Bounty-Programm-fuer-Open-Source-vorerst-ein-11477722.html #ArtificialIntelligence #AI #AIslop
@offensivecon.bsky.socialWe’re thrilled to welcome Meta Bug Bounty as a Silver Sponsor of OffensiveCon Tokyo! 🎉
Huge thanks for supporting us!— see you in Tokyo.
#OffensiveConTokyo2026 #OffensiveCon #Meta #MetaBugBounty #BugBounty
@thedailytechfeed.comOpenAI flaw allowed free access to paid AI models—no API key, no account. #AI #OpenAI #Cybersecurity #BugBounty #SecurityFlaw #ModelAccess https://thedailytechfeed.com/openai-bug-let-users-access-paid-models-without-api-key/
@ladybugfi.bsky.socialInterestingly #bugbounty hunters and individual researchers have been dumped into the lowest "Defence" tier with no offensive tools and solve rate <10%. The two higher tiers have solve rates of >70%. The driver is money, higher tiers are geared towards big orgs, pricing is per seat.
@hacks.grOliver Fish says he found a way to use OpenAI’s paid models without an account or access key.
No public evidence shows others used it or accessed…
@reconbee.bsky.socialGoogle Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports reconbee.com/google-pause...
@intelliflame.bsky.socialWe're BugTraceAI 👋 An open-source, self-hosted agentic pentester. AI agents plan. Real tools validate. Every finding ships with evidence. 3 CVEs · DEF CON 34 demo Live demo → demo.bugtraceai.com Code → github.com/BugTraceAI #infosec #bugbounty #pentesting #agenticAI
@cyberupdates365.bsky.socialGoogle has temporarily paused product vulnerability rewards in its OSS VRP while that part of the program is reworked.
Supply-chain compromise rewards remain active.
@winfuture.deFlut aus KI-generierten Berichten: #Google stoppt sein #BugBounty-Programm für Open-Source-Software vorübergehend, weil Entwickler mit der Prüfung der vielen Falschmeldungen überlastet sind.
@yasna.ioGoogle has paused its open-source bug bounty program due to a surge of AI-generated invalid reports, affecting submissions for projects like Go and Angular.
#Vulnerability #BugBounty #infosec
Full synthesis & sources: yasna.io
@it4intserver.bsky.socialiT4iNT SERVER Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports VDS VPS Cloud #Google #OSS #BugBounty #Cybersecurity #OpenSource
@whaller.bsky.socialB comme #BugBounty 🐞 Des chercheurs en sécurité signalent les failles de façon responsable, contre récompense. L'organisation corrige avant qu'un attaquant n'en profite : tester, signaler, corriger.
@coletteweston.bsky.socialGoogle has temporarily halted product vulnerability submissions for its open-source #BugBounty program after an influx of invalid, #AI-generated reports overwhelmed maintainers.
#CyberSecurity #Google
@thenewoil.org