The Curious Engineer

All blogs / Security

Alex Schapiro

alexschapiro.com

Security research, ethical hacking, and building stuff.

Security

’25’26
Posts
4 from 21 Apr 2025 to 24 Aug 2026
Posting
now and then (3 in the last year)
Kind
personal blog
Feed
https://alexschapiro.com/feed.xml

2026 1

  1. How a Blackstone real estate company exposed Social Security digits, dates of birth, addresses, and other applicant data through a GraphQL authorization flaw

2025 3

  1. How I Reverse Engineered a Billion-Dollar Legal AI Tool and Found 100k+ Confidential Files
  2. Brute-Forceable Airline Reservation API Left Millions of Passenger Records Vulnerable
  3. How Broken OTPs and Open Endpoints Turned a Dating App Into a Stalker’s Playground