Grzegorz Niedziela
Senior Security Researcher at Vidoc Security Lab
Bug bounty hunter working on web and mobile application security. Hall of Fame recognition from Google, Meta, AWS, GitLab, Stripe and TikTok. HackerOne Advisory Board member, two-time Live Hacking Event invitee and Polish HackerOne Ambassador, quarterfinalist with the Polish team at the Ambassador World Cup 2025. Creator of Bug Bounty Reports Explained, a YouTube channel with more than 67,000 subscribers that breaks down real-world vulnerabilities.
Articles by Grzegorz Niedziela
2 articles published
September 30, 2026 (15d ago)
Jev is cheap. But it's not good for security
Cheap, fast models look like an easy win for the small decisions inside a vulnerability detection pipeline. I tested that idea by having Jev and seven LLMs score real CVEs using CVSS. The savings are real and too small to matter, and the accuracy you give up is not.
January 10, 2024 (2y ago)
AWS S3 Bucket Takeover - how to find it and maximize impact?
The impact of an AWS S3 Bucket Takeover can range from none, account takeover, and even up to RCE. In this article, we'll tell you how to find it and maximize its impact