New Year New Gear

/The Bee's Knees 🐝

The headline picks from this issue. The full issue has more.

1. /01

   Top 10 Web Hacking Techniques of 2025

   PortSwigger's annual community-powered list highlights the most innovative web security research, from error-based SSTI techniques to ORM leaks and XS-Leaks. Side-channels emerged as a core exploitation primitive this year.

   Read : Top 10 Web Hacking Techniques of 2025
2. /02

   Code is Cheap

   Show Me the Talk. Software development as we knew it is over. LLM coding tools have fundamentally changed the game, making good articulation and engineering skills more valuable than syntax knowledge.

   Read : Code is Cheap
3. /03

   My AI Adoption Journey

   Mitchell Hashimoto shares a measured, practical approach to adopting AI tools through six phases, from dropping chatbots to always having an agent running. Includes tips on "harness engineering" to prevent agent mistakes.

   Read : My AI Adoption Journey
4. /04

   Oracle E-Business Suite Pre-Auth RCE Chain (CVE-2025-61882)

   WatchTowr walks through the exploit chain being actively used against Oracle EBS, combining SSRF, CRLF injection, auth bypass, and XSLT for pre-auth remote code execution.

   Read : Oracle E-Business Suite Pre-Auth RCE Chain (CVE-2025-61882)
5. /05

   Discovering Negative-Days with LLM Workflows

   Security patches are public before CVEs are assigned, and attackers are already monitoring for them. SpaceRaccoon built a GitHub Action to detect security patches in open-source repos before (or if ever) a CVE is published.

   Read : Discovering Negative-Days with LLM Workflows