https://debsec.cl/en/blog/Notes, research and news from debsec.cl, an offensive security lab.enhttps://debsec.cl/en/blog/h1-october-2026/https://debsec.cl/en/blog/h1-october-2026/Sat, 31 Oct 2026 00:00:00 +0000October, the month of criticals: 24, the highest in the series, out of 98 valid.https://debsec.cl/en/blog/lhe-banco-galicia-2026/https://debsec.cl/en/blog/lhe-banco-galicia-2026/Fri, 09 Oct 2026 00:00:00 +0000I spent a couple of days hacking a bank with YesWeHack. I can't tell you the bugs, but I can tell you how it went and what I hunted them with.https://debsec.cl/en/blog/lhe-meta-2026/https://debsec.cl/en/blog/lhe-meta-2026/Thu, 08 Oct 2026 00:00:00 +0000The other Live Hacking Event that week was Meta's. 46 reports, the toughest program out there, and one uncomfortable truth: here, privacy is what pays.https://debsec.cl/en/blog/h1-september-2026/https://debsec.cl/en/blog/h1-september-2026/Wed, 30 Sep 2026 00:00:00 +0000The biggest month: 136 valid reports across 61 programs.https://debsec.cl/en/blog/h1-august-2026/https://debsec.cl/en/blog/h1-august-2026/Mon, 31 Aug 2026 00:00:00 +0000August, more concentrated: 104 valid across 38 programs, with more depth per target.https://debsec.cl/en/blog/h1-july-2026/https://debsec.cl/en/blog/h1-july-2026/Fri, 31 Jul 2026 00:00:00 +0000July: 123 valid and severity climbing, with 18 criticals.https://debsec.cl/en/blog/h1-june-2026/https://debsec.cl/en/blog/h1-june-2026/Tue, 30 Jun 2026 00:00:00 +0000June was about volume: 132 valid reports across 83 distinct programs.https://debsec.cl/en/blog/h1-may-2026/https://debsec.cl/en/blog/h1-may-2026/Sun, 31 May 2026 00:00:00 +0000May on HackerOne with DS-AI: 68 valid reports across 49 programs.https://debsec.cl/en/blog/h1-april-2026/https://debsec.cl/en/blog/h1-april-2026/Thu, 30 Apr 2026 00:00:00 +0000The first full month running DS-AI on HackerOne: 66 valid reports across 41 programs.