@blog.includesecurity.com@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Team Research blog
Site URL: blog.includesecurity.com/
Feed URL: blog.includesecurity.com/feed
Posts: 10
Followers: 1
The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy
Published: June 5, 2026 16:01
In this post we look under the hood of BrightData's SDK and how it turns ordinary consumer TVs into exit nodes of an enormous commercial, residential proxy network leveraged by the AI industry to scrape web data and train language learning models. The post…
CTFs in the AI Era
https://blog.includesecurity.com/2026/04/ctfs-in-the-ai-era/
Published: April 23, 2026 16:01
The Include Security team attended the BSides 2026 CTF competition and observed how effective frontier models have become at solving a variety of CTF challenges. Our team gives a first-hand account of how the winning strategy has recently shifted to…
The AWS Console and Terraform Security Gap
https://blog.includesecurity.com/2026/02/the-aws-console-and-terraform-security-gap/
Published: February 19, 2026 16:24
Are you using Terraform to build or configure your AWS environment? You might be surprised by configuration settings that introduce vulnerabilities by default, particularly if you're already familiar with using the AWS or other cloud provider interfaces…
Immutable Strings in Java – Are Your Secrets Still Safe?
https://blog.includesecurity.com/2025/11/immutable-strings-in-java-are-your-secrets-still-safe/
Published: November 11, 2025 19:02
Java programmers might not be aware their secrets could be floating around in system memory long after it's assumed those secrets have been removed. The problem is a combination of immutability and garbage collection in Java. Our most recent post explores…
Production Security, Not That Kind
https://blog.includesecurity.com/2025/10/production-security-not-that-kind/
Published: October 3, 2025 19:33
The Include Security team takes a foray into the world of audio production equipment in our latest blog post. We look under the hood of a professional-grade audio mixer to explore its security profile, consider how its functionality could be leveraged by…
LLMs in Applications – Understanding and Scoping Attack Surface
Published: July 17, 2025 19:01
In this post we consider how to think about the attack surface of applications leveraging LLMs and how that impacts the scoping process when assessing those applications. We discuss why scoping matters, important points to consider when mapping out the…
Misinterpreted: What Penetration Test Reports Actually Mean
https://blog.includesecurity.com/2025/05/misinterpreted-what-penetration-test-reports-actually-mean/
Published: May 27, 2025 16:27
This month's post discusses pentest reports and how the various audiences that consume them sometimes misinterpret what they mean. We cover why findings in a report are not a sign of failure, why "clean" reports aren't always good news, and why it may not…
Cross-Site WebSocket Hijacking Exploitation in 2025
https://blog.includesecurity.com/2025/04/cross-site-websocket-hijacking-exploitation-in-2025/
Published: April 17, 2025 18:59
Include Security's latest blog post covers Cross-Site WebSocket Hijacking and how modern browser security features do (or don't) protect users. We discuss Total Cookie Protection in Firefox, Private Network Access in Chrome, and review the SameSite…
Memory Corruption in Delphi
https://blog.includesecurity.com/2025/03/memory-corruption-in-delphi/
Published: March 13, 2025 18:55
In our team's latest blog post, we build a few examples that showcase ways in which memory corruption vulnerabilities could manifest in Delphi code despite being included in a list of "memory safe" languages within a paper published by the NSA. We cover…
Replacing a Space Heater Firmware Over WiFi
https://blog.includesecurity.com/2025/02/replacing-a-space-heater-firmware-over-wifi/
Published: February 4, 2025 20:00
Our team hacks space heater firmware updates over wifi in the latest Include Security blog post. We break down, literally and figuratively, each step of the attack to demonstrate how anonymous users on the same wireless network as an affected space heater…