IAN
News
Driving in China as a tourist
How I obtained a temporary driving permit in Shenzhen and rented a Xiaomi SU7!
Read more
Report
Backstage access: an unauthenticated SQL injection in Front Gate Tickets
If you have been to a major music festival in the United States, there is a good chance your ticket was sold through Front Gate Tickets (FGT), a Live Nation/Ticketmaster subsidiary that handles ticketing and payments for events like EDC, Bonnaroo, Outside
Read more
Report
Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs
We found vulnerabilities in the FIA's Driver Categorisation platform, allowing us to access PII and password hashes of any racing driver with a categorisation rating.
Read more
Report
Would you like an IDOR with that? Leaking 64 million McDonald's job applications
When applying for a job at McDonald's, over 90% of franchises use "Olivia," an AI-powered chatbot. We discovered a vulnerability that could allow an attacker to access more than 64 million job applications. This data includes applicants' names, resumes, e
Read more
Report
Bypassing airport security via SQL injection
We discovered a serious vulnerability in the Known Crewmember (KCM) and Cockpit Access Security System (CASS) programs used by the Transportation Security Administration.
Read more
Report