3 articles on vulnerability from the Codebumble team, written to be acted on.
Google has patched a high-severity memory corruption flaw in Chrome Autofill. This article follows its disclosure, explains the sandbox boundary, and lists the updates users need.
6 min read
A flaw in Google's Brotli decoder lets a crafted compressed request or response crash, leak or take over a Node.js process. This is how it was found, named, patched and exploited, and what to fix first.
6 min read
Two critical flaws in PHP let attackers run code without logging in. This is the story of how they were found, leaked, patched and exploited, and what you should do now. Topic: Security
4 min read
A thirty-minute call, no deck and no obligation. You will leave with a straight answer about whether this is worth building - including if that answer is no.
