Runtime-Protection on CuraSechttps://curasec.metacog.co.kr/tags/runtime-protection/Recent content in Runtime-Protection on CuraSecHugoen-usMon, 14 Sep 2026 18:03:45 +0000IDORacle: Runtime SQL-Sink Interception for IDOR/BOLA in Java Appshttps://curasec.metacog.co.kr/insights/2026-09-14-idoracle-template-guided-sql-sink-mediation-for-object-level/Mon, 14 Sep 2026 18:03:45 +0000https://curasec.metacog.co.kr/insights/2026-09-14-idoracle-template-guided-sql-sink-mediation-for-object-level/<ul> <li><strong>Engineer — Learn:</strong> Novel approach to enforcing object-level authorization at the MyBatis/JDBC boundary rather than the controller layer — worth reviewing if you own Java applications with IDOR exposure, but no tool is publicly released yet so no concrete action today.</li> <li><strong>SOC/IR — Skip</strong></li> <li><strong>Leader — Skip</strong></li> </ul>