Vidoc Security Lab

Don't wait for foreign actors to hack you, let us hack you first. If you join us at @daytonaio Compute Conference, we can hack you in less than 30 min. If we fail, we will buy you dinner.

I have been saying this for quite some time, but LLMs crossed "scary good" for cybersecurity blog.vidocsecurity.com/blog/llms-beca…

The @criticalhack_eu is happening now. Rooting for all teams!

Starting the weekend at @criticalhack_eu 🦾

Happy Holidays, hackers!

The Takeaway: Modern hacks aren't usually buffer overflows. They are Logic Chains. We don't just build security tool; we prove why security matters. Read the full technical write-up here: blog.vidocsecurity.com/blog/how-we-se…

The Fix: VIDOC’s automated analysis flagged this cross-context vulnerability immediately. @Lovable’s engineers patched it fast — hardening the cookie scope and enforcing strict frame-ancestors policies before any users were impacted. 🛡️

We found a way to bypass authentication on one of Europe’s fastest-growing AI platforms. No leaked passwords. No brute force. Just a simple "Cookie Jar" configuration error that spiraled into a critical vulnerability. Here's the technical breakdown of the exploit chain. 🧵

Discover more here ↓ diana.nato.int/about-diana/20…

The secret is out! @vidocsecurity has been selected to join the prestigious NATO DIANA 2026 Challenge Programme Cohort 🥳

who’s joining us at the Operators & Friends x Build.inc x @pebble_bed hackathon?!

@chrislevan secured

pitch me your company in 1 word.

Read full story: blog.vidocsecurity.com/blog/how-we-se…

We helped @lovable keep their platform secure 🪲 VIDOC found a rare account takeover vulnerability, now helps their team run checks and confirm fixes We don’t just build security tool, we prove why it matters