pull down to refresh

It's worth noting that the Red Team scanned BTCPay Server and completely missed the macaroon exploit: https://x.com/NicolasDorier/status/2085779382174372073

maybe because they are only using AI as an automated vulnerability scanner (as a blue team), and not using an adversarial mindset for threat model development of an offensive attack.

reply

"But this bug was really sneaky, I am not surprised a simple scan didn't find it, or thought it was low risk."

https://xcancel.com/NicolasDorier/status/2085779382174372073

reply

😂

reply