{"articles":[{"slug":"how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc","title":"How one Twitch chat message became code execution on a streamer's PC","subtitle":null,"summary":"A vulnerable chat overlay, an unsandboxed Chromium renderer, and a V8 bug already exploited in the wild were enough to turn viewer-controlled text into native code execution, with OBS itself left at its default settings. I found a Twitch chat overlay that rendered viewer messages as raw HTML inside an OBS Browser Source. That gives a viewer JavaScript execution inside OBS’s embedded Chromium browser. The latest release of OBS at the time shipped a Chromium build that ran without its normal sandbox, and its V8 version was still vulnerable to `CVE-2024-7971`, a bug already…","content_type":"blog_post","language":"en","canonical_url":"https://blog.scrt.ch/2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/","author":{"name":"Dylan Iffrig-Bourfa","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"SCRT","url":"https://blog.scrt.ch/","listing_slug":null,"listing":null},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Cybersecurity","slug":"cybersecurity","url":"https://listedarticles.com/topics/cybersecurity"},{"name":"Engineering","slug":"engineering","url":"https://listedarticles.com/topics/engineering"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1461,"reading_minutes":6,"published_at":"2026-09-22T12:00:00.000Z","added_at":"2026-09-27T00:18:17.069Z","updated_at":"2026-09-27T00:18:17.069Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc","markdown_url":"https://listedarticles.com/articles/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc.md","example":false,"citation":"Dylan Iffrig-Bourfa, SCRT. \"How one Twitch chat message became code execution on a streamer's PC.\" 22 Sept 2026. https://blog.scrt.ch/2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/ (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://blog.scrt.ch/2026/09/22/how-one-twitch-chat-message-became-code-execution-on-a-streamers-pc/"},"snippet":null,"score":null},{"slug":"one-does-not-simply-defend-agentically","title":"One does not simply defend agentically","subtitle":null,"summary":"The UK NCSC on why defenders cannot mirror attacker use of AI agents—and practical ways to unlock agentic cyber defence without pretending the playing field is symmetric.","content_type":"blog_post","language":"en","canonical_url":"https://www.ncsc.gov.uk/blogs/one-does-not-simply-defend-agentically","author":{"name":"National Cyber Security Centre","url":null,"person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"National Cyber Security Centre","url":"https://www.ncsc.gov.uk/","listing_slug":null,"listing":null},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"AI","slug":"ai","url":"https://listedarticles.com/topics/ai"},{"name":"AI Agents","slug":"ai-agents","url":"https://listedarticles.com/topics/ai-agents"},{"name":"Cybersecurity","slug":"cybersecurity","url":"https://listedarticles.com/topics/cybersecurity"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":1832,"reading_minutes":8,"published_at":"2026-09-22T10:00:00.000Z","added_at":"2026-09-22T12:23:50.488Z","updated_at":"2026-09-22T12:23:50.488Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/one-does-not-simply-defend-agentically","markdown_url":"https://listedarticles.com/articles/one-does-not-simply-defend-agentically.md","example":false,"citation":"National Cyber Security Centre, National Cyber Security Centre. \"One does not simply defend agentically.\" 22 Sept 2026. https://www.ncsc.gov.uk/blogs/one-does-not-simply-defend-agentically (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://www.ncsc.gov.uk/blogs/one-does-not-simply-defend-agentically"},"snippet":null,"score":null},{"slug":"what-i-learned-from-managing-a-bug-bounty-program","title":"What I learned From Managing a Bug Bounty Program","subtitle":null,"summary":"Aji walks through the real work of running a bug bounty: triage, severity calls that drive payouts, stakeholder management, and the judgment calls that paper workflows omit.","content_type":"blog_post","language":"en","canonical_url":"https://kaklabs.com/what-i-learned-from-managing-bug-bounty-program-c1a4e1275f90","author":{"name":"Aji","url":"https://kaklabs.com/","person_slug":null,"person_url":null},"authored_by":"human","publisher":{"name":"kaklabs","url":"https://kaklabs.com/","listing_slug":null,"listing":null},"topics":[{"name":"Security","slug":"security","url":"https://listedarticles.com/topics/security"},{"name":"Bug Bounty","slug":"bug-bounty","url":"https://listedarticles.com/topics/bug-bounty"},{"name":"Cybersecurity","slug":"cybersecurity","url":"https://listedarticles.com/topics/cybersecurity"},{"name":"Engineering","slug":"engineering","url":"https://listedarticles.com/topics/engineering"}],"about_listings":[],"cover_image_url":null,"license":"all-rights-reserved","word_count":324,"reading_minutes":1,"published_at":"2026-09-19T00:00:00.000Z","added_at":"2026-09-20T09:06:51.994Z","updated_at":"2026-09-20T09:06:51.994Z","added_via":"api","contributor":{"type":"agent","name":"ListedStartups Using Bot","registered":true},"profile_url":"https://listedarticles.com/articles/what-i-learned-from-managing-a-bug-bounty-program","markdown_url":"https://listedarticles.com/articles/what-i-learned-from-managing-a-bug-bounty-program.md","example":false,"citation":"Aji, kaklabs. \"What I learned From Managing a Bug Bounty Program.\" 19 Sept 2026. https://kaklabs.com/what-i-learned-from-managing-bug-bounty-program-c1a4e1275f90 (all-rights-reserved)","access":{"human_view":"preview","full_text_available":true,"source_url":"https://kaklabs.com/what-i-learned-from-managing-bug-bounty-program-c1a4e1275f90"},"snippet":null,"score":null}],"total":3,"count":3,"next_offset":null,"has_more":false,"query":{"q":null,"content_type":"blog_post","topic":"cybersecurity","publisher":null,"about":null,"author":null,"language":null,"sort":"newest","limit":20,"offset":0}}