Episode 198: Scariest Bugs of 2026 - Halloween Special

Episode 198: In this episode of Critical Thinking - Bug Bounty Podcast we're back with the spookiest bug stories we've had this year. We're talking government hacks, summoning global agents, low payouts/long triage times, and possibly the scariest thing of all for us: Dealing with JD's technical issues...

Follow us on twitter at: https://x.com/ctbbpodcast

Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io

Shoutout to YTCracker for the awesome intro music!

====== Links ======

Follow your hosts Rhynorater, rez0 and gr3pme on X:

https://x.com/Rhynorater

https://x.com/rez0__

https://x.com/gr3pme

https://x.com/xssdoctor

Critical Research Lab:

https://lab.ctbb.show/

Need a Pentest? We just launched CTBB Pentests!

https://pentest.ctbb.show/

Hack full time? Check out the Full-Time Hunter’s Guild!

https://ctbb.show/fthg

====== Ways to Support CTBBPodcast ======

Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at https://ctbb.show/merch!

Join us for NahamCon IN PERSON

https://www.criticalthinkingpodcast.io/Nahamcon

Sponsored by Intigriti: Join the Waitlist for CrowdRecon!

https://www.criticalthinkingpodcast.io/Intigriti-CrowdRecon

====== Timestamps ======

(00:00:00) Introduction

(00:03:08) Full Auth by Migration Endpoint & RCE Sandbox, artifacts, & Blobs

(00:16:46) Summoning a Global Agent & Preying on Vulnerable Chatbots

(00:27:25) 3d Printer hacks via Tickets

(00:34:20) Hacking Healthcare and Governments

(00:47:52) Dispatcher RCE & the Tale of 3 Bugs

(01:01:05) Pwning IoT Devices

(01:10:15) Intuition Hacks & Scary Low Payouts

(01:18:25) Hackbot Horror Stories