Tag
#PortSwigger
3 stories taggedPortSwigger.
AI Security
A human and an AI teamed up to find hundreds of hackable websites. The results rewrote the rulebook.
PortSwigger researcher James Kettle built an AI system called HTTP Terminator, guided it through 30,000 attack ideas, and together they uncovered a brand-new class of web vulnerability hitting banks and government systems.
5 min read
Vulnerabilities
AI Research Tool Finds New Web Server Attack Tricks and an Apache Zero-Day
PortSwigger's James Kettle ran an AI-assisted system called HTTP Terminator against 30,000 sites, turned up fresh HTTP desync techniques, and then found a previously unknown flaw in Apache Traffic Server by following one of its leads by hand.
4 min read
Vulnerabilities
Your Email's Design Layer Can Steal Your Password. No Suspicious Attachment Required.
Security researcher Gareth Heyes found that CSS, the code responsible for how emails look on screen, can be turned into a data-theft tool inside popular webmail services. No malicious files. No links to click.
4 min read