Vulnerability research, CVE write-ups and practical guides from the team building Gecko. Written for the engineers who have to fix the thing, not just triage it.
Gecko’s AI security engineer discovered critical chained vulnerabilities in Cal.com Cloud that allowed complete account takeover and exposed all booking data.
Jeevan “JJ” Jutla
Previously, there were entire classes of business logic and multi-step vulnerabilities that have long been invisible to SAST. Today, that changes.
Jeevan “JJ” Jutla
Server-side request forgery vulnerability in BentoML’s file upload processing system allowing arbitrary HTTP requests from the server.
Artemiy Malyshau
Showing 31 - 33 of 47 articles
Occasional updates and insights. No spam; unsubscribe anytime.