
This post will not disclose specific details regarding the vulnerability I discovered on one of the Parliament of NSW's public-facing digital assets. You can find their official Public Vulnerability Disclosure Program (VDP) here.

I identified the security flaw and reported it to their team on 25 January 2026. Subsequently, I received a formal acknowledgement via email on 5 February 2026.
See you in the next hack.
@aaronamran
Feb 2026