Web Application Security
Posts from Security Cipher.
Software Supply Chain Security in 2026: Packages, Pipelines, and Provenance
Most teams still treat supply chain security like a compliance checkbox: generate an SBOM once a quarter, turn on Dependabot, call it…
How I Would Hack Your Startup in 24 Hours (Real-World Pentest Guide)
Give me your company name and 24 hours. That is usually all it takes to go from knowing nothing about a startup…
Web Cache Poisoning in 2026: A Practical Playbook (One Request, Every Victim)
Most web bugs hit one victim at a time. Web cache poisoning is different, and that is exactly why it is worth…
Hacking GraphQL APIs in 2026: Introspection, BOLA, and Batching Attacks
GraphQL is a gift to attackers. One endpoint, usually /graphql, that speaks a typed, self-describing language and will happily tell you every…
IDOR Hunting in 2026: A Practical Playbook for Finding Broken Access Control
IDOR is the bug that pays rent for a lot of bug bounty hunters, and it is still the one developers ship…
MCP Server Security (2026): A Practical Pentester’s Testing Playbook
If you are running Cursor, Claude Desktop, Windsurf, or a home-grown agent stack in 2026, you almost certainly have MCP servers in…
Bug Bounty Recon Workflow (2026): A Practical, Copy-Paste Playbook
A practical bug bounty recon workflow for 2026 - the exact commands for subdomains, live hosts, URLs, JS analysis and content discovery,…
Agentjacking: How Attackers Hijack AI Coding Agents Like Cursor and Claude
Agentjacking lets attackers hijack AI coding agents like Cursor, Claude Code and Codex via poisoned error data. Here's how it works and…
AutoJack: How One Web Page Can Hijack Your AI Agent and Own Your Machine
Microsoft's AutoJack shows how a single malicious web page can hijack an AI agent and run code on your machine. Here's how…
LLM Agents can Autonomously Hack Websites ?
Based on the research paper (https://arxiv.org/pdf/2402.06664.pdf), the study delves into the autonomous hacking capabilities of Large Language Models (LLMs), particularly focusing on…