This Linux Bug Gives Attackers Root
A Vulnerability to Hack The World - CVE-2023-4863
AI Is Hacking Everything Now...
732 bytes of Python just borked every Linux machine on earth…
Sorry Windows 10 Users...
My theory on how the webp 0day was discovered #short
My theory on how the webp 0day was discovered (BLASTPASS)
An initiative to secure the world's software | Project Glasswing
Ubuntu under attack, Big flaw affects all Linux distros, Linux beats Windows - Linux Weekly News
…under CVE-2026-45585 and shared mitigation measures to defend against potential attacks exploiting it in the wild. "Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to…
…And it’ll find some vulnerability, it can find some configuration, it’ll run an exploit, for a weakness that no one ever has before, and it’ll do it with almost…
…Microsoft suggests it plans to bring a criminal case against Nightmare Eclipse for failing to follow “proper coordination” in disclosing vulnerabilities. They also disabled Nightmare Eclipse’s GitHub, GitLab, and Microsoft Security…
…About it, the Cybersecurity and Infrastructure Security Agency (CISA) writes : "This Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks…
Head over to Netomize's blog to learn about how we detect the exploitation of the CrushFTP Vulnerability (CVE-2025-31161) with PacketSmith's Yara detection module, using the newly introduced track_state and flow_state ke…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
I co-founded a successful security company close to the Mythos ecosystem and have spoken with participants in the know and I am deeply concerned. We, collectively, have answers for some but not all of the problems ahead …
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
On May 7, Hyunwoo Kim (V4bel) disclosed Dirty Frag — two Linux kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500) that give unprivileged users deterministic root on most Linux distributions shipped since 2017. Mi…
…exploited in zero-day attacks by a threat actor tracked as "UAT-8616" since 2023 to create rogue peers in organizations. Cisco has released security updates to address the vulnerability and says…
…To do this, we gave Claude access to the vulnerabilities we’d submitted to Mozilla and asked Claude to create an exploit focusing on each one. To prove it had successfully exploited…
…Cross-site scripting (CWE-79) and SQL injection (CWE-89) are consistently among the most exploited vulnerability types according to OWASP and CISA's Known Exploited Vulnerabilities (KEV) catalog. If your scanner…
…Cloudflare’s Security and Engineering teams began assessing the vulnerability as soon as it was disclosed. We reviewed the exploit technique, evaluated exposure across our infrastructure, and validated that our existing behavioral…
…Security researcher Hyunwoo Kim disclosed finding a nine-year-old flaw, and published a proof-of-concept (PoC) exploit. He named the vulnerability Dirty Frag, and explained that it works by chaining…
…Privilege is where vulnerabilities become breaches. Threat actors no longer need noisy exploits or mass malware campaigns if they can quietly escalate access and move laterally using legitimate credentials and Living Off…