Top all-time · #12591
Ostorlab Blog
Company blog · blog.ostorlab.cosecurityai
Ostorlab Blog is the company blog at blog.ostorlab.co, writing about security and ai. Since 2020, 6 different Hacker News readers have linked it 16 times. It is still writing: the last post was on 2026-11-01, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked once as "relevant" in an HN thread on whether iOS is more secure than Android. The linked post appears to be about exploiting zip packages, going by its URL.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Vulnerability research, CVE deep dives and engineering write-ups from the Ostorlab team on AI pentesting and mobile, web and API security testing.
What Hacker News says?
https://blog.ostorlab.co/known_exploitable_vulnerabilities_c...
Comment linking /known_exploitable_vulnerabilities_catching_them_all.html
on “Open-Source Detector of CISA's Known Exploitable Vulnerabilities”Submitted Finding hardcoded keys and Secrets in Mobile Apps for fun and profit as a story · 10 points
HN discussionrelevant: https://blog.ostorlab.co/zip-packages-exploitation.html
Comment linking /zip-packages-exploitation.html
on “Dangerous illusions of security: is iOS more secure than Android?”Submitted Automating Security Research: AI Engine Exploits Complex Blind Code Injection as a story · 5 points
HN discussionWe have published a new study reviewing the Security Landscape of Mobile Banking Applications in North America. The study is conducted on over 400 Android and iOS applications analyzing their release cycles, features, capabilities, and tech stacks. The study also performed a deep dive reviewing the mobile applications' security and privacy posture. Here are some key insights from the study: * Over 30% of the applica…
Comment linking /security-mobile-banking-app-landscape-na-2024.html
on a deleted threadSubmitted Known Exploitable Vulnerabilities: Catching them all as a story · 5 points
HN discussionSubmitted Robust technique to universal bypass of SSL Pinning, from theory to a full PoC as a story · 4 points
HN discussionSubmitted Finding superhuman XSS polyglot payloads with Genetic Algorithms as a story · 4 points
HN discussionSubmitted Automating Mobile navigation for security testing with evolutionary search as a story · 3 points
HN discussionSubmitted Things every mobile security professional should know about WebViews as a story · 3 points
HN discussionSubmitted Autonomous Security: Pushing Security Automation to the Next Level as a story · 3 points
HN discussionSubmitted New community platform to take pain out of managing vulnerabilites as a story · 2 points
HN discussionSubmitted Banking Malware hiding inside a flashlight app? (BeatBanker / BTMOB) as a story · 1 points
HN discussionSubmitted Swift Under the Microscope: Practical Dynamic Instrumentation as a story · 1 points
HN discussionSubmitted GodFather Android Malware Analysis as a story · 1 points
HN discussionSubmitted New mobile security analysis environment for advanced technical reviews as a story · 1 points
HN discussion