Research

When Metadata Goes Rogue: Lessons from the Tea App Breach

The Tea app breach exposed thousands of user selfies with sensitive location metadata, revealing key lessons on protecting privacy by stripping metadata from uploads.

How a Toreon ski-trip led to a CVE in MikroTik’s Wi-Fi Hotspot

During Toreon’s annual ski trip, Robbe opted out of skiing and hiking to explore the hotel’s Wi-Fi login page for security flaws. While others hit…

Toreon authorized by the CVE as a CVE Numbering Authority

Toreon is now an official CVE Numbering Authority (CNA), enabling formal disclosure of security vulnerabilities. This strengthens Toreon’s leadership in product and AI security, helping…

CVE-2024-28088: How URI Traversal in LangChain Led to API Token Theft and potentially Remote Code Execution

This is the story of how Robbe discovered CVE-2024-28088, a URI traversal vulnerability in LangChain’s configuration loading mechanism that led to full API token leakage,…

Start typing and press Enter to search

Shopping Cart