https://security-research.hashnode.dev 2026-09-18T05:47:23.502Z always 1.0 https://security-research.hashnode.dev/your-perimeter-will-fail-the-real-question-is-how-far-an-attacker-gets-after 2026-09-17T03:45:17.542Z daily 0.8 https://security-research.hashnode.dev/your-pentest-report-says-sql-injection-on-api-search-it-won-t-say-which-line 2026-09-17T03:41:27.054Z daily 0.8 https://security-research.hashnode.dev/i-automated-copilot-code-review-on-every-pull-request-here-s-what-it-still-can-t-do 2026-09-16T06:06:54.141Z daily 0.8 https://security-research.hashnode.dev/why-your-6-500-penetration-test-will-cost-you-more-than-the-47-000-one 2026-09-09T11:13:46.233Z daily 0.8 https://security-research.hashnode.dev/external-penetration-testing-in-2026-a-technical-methodology-tool-stack-and-attack-surface-guide 2026-09-09T10:48:31.457Z daily 0.8 https://security-research.hashnode.dev/idor-the-vulnerability-class-your-scanners-will-never-find 2026-09-08T07:00:06.352Z daily 0.8 https://security-research.hashnode.dev/black-box-vs-white-box-vs-gray-box-pentesting-picking-the-right-one-most-teams-don-t 2026-09-07T11:18:44.892Z daily 0.8 https://security-research.hashnode.dev/red-team-authorization-solving-the-paradox-of-testing-people-who-can-t-know-they-re-being-tested 2026-09-07T07:53:28.571Z daily 0.8 https://security-research.hashnode.dev/soc-2-penetration-testing-what-auditors-actually-check-for-and-where-most-programs-fail 2026-09-07T07:23:28.325Z daily 0.8 https://security-research.hashnode.dev/the-deployment-velocity-gap-why-annual-pentesting-can-t-keep-up-with-modern-saas 2026-09-07T06:37:21.471Z daily 0.8 https://security-research.hashnode.dev/dissecting-fois-the-log4j2-filter-that-only-does-half-its-job 2026-09-01T06:59:33.039Z daily 0.8 https://security-research.hashnode.dev/how-a-github-triage-role-hijacked-an-already-authorized-claude-code-action-run 2026-08-31T09:23:42.115Z daily 0.8 https://security-research.hashnode.dev/claude-code-macos-sandbox-toctou-vulnerability 2026-08-31T09:20:56.206Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71511-read-a-member-s-card-receive-their-password-hash 2026-08-25T10:35:47.313Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71510-ask-enough-yes-no-questions-and-you-know-everyone-s-salary 2026-08-25T11:53:21.627Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71509-approve-your-own-expenses-and-your-whole-team-s 2026-08-25T10:32:16.755Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71508-set-your-own-salary-and-the-receipt-hides-it 2026-08-25T10:30:25.399Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71507-change-one-number-and-the-payroll-run-pays-you 2026-08-25T10:28:20.584Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71506-the-wrong-key-on-the-lock 2026-08-25T10:26:32.954Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71505-the-read-desk-checks-your-id-the-write-desk-doesn-t 2026-08-25T11:33:39.038Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71504-the-membership-desk-that-could-reset-the-admin-s-password 2026-08-25T10:24:17.225Z daily 0.8 https://security-research.hashnode.dev/cve-2026-71503-one-link-opened-once-mints-a-second-admin 2026-08-25T10:24:34.603Z daily 0.8 https://security-research.hashnode.dev/the-back-office-break-in-nine-dolibarr-findings 2026-08-25T10:39:36.373Z daily 0.8 https://security-research.hashnode.dev/series/dolibarr-security-findings 2026-09-18T05:47:23.502Z weekly 0.6 https://security-research.hashnode.dev/archive 2026-09-18T05:47:23.502Z daily 0.5 https://security-research.hashnode.dev/recommendations 2026-09-18T05:47:23.502Z weekly 0.4