… The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger and Softpedia. …
… Other successful attempts include k3vg3n chaining 3 bugs to take down LiteLLM $40,000 , Satoki Tsuji and haehae exploiting NVIDIA Megatron Bridge zero-days $20,000 , Compass Security and maitai of Doyensec hacking OpenAI's Codex coding agent each earning $40,000 , haehae dropping a Chroma zero-day … …
… The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger and Softpedia. …
Hackers earn $1,298,250 for 47 zero-days at Pwn2Own Berlin 2026 By Sergiu Gatlan May 18, 2026 01:33 AM The Pwn2Own Berlin 2026 hacking contest has concluded, with security researchers collecting $1,298,250 in rewards after exploiting 47 zero-day flaws. …
… In early December, the Gogs security team patched another Gogs RCE vulnerability CVE-2025-8110 that was exploited in zero-day attacks to compromise hundreds of servers. …
… Cybersecurity and Infrastructure Security Agency CISA also added a critical command injection flaw CVE-2010-5330 in Ubiquiti AirOS to its catalog of actively exploited vulnerabilities and ordered federal agencies to secure their devices within three weeks. …
… Download Now Related Articles: Instructure reaches 'agreement' with ShinyHunters to stop data leak Home security giant ADT data breach affects 5.5 million people Vimeo data breach exposes personal information of 119,000 people Cosmetics giant Rituals discloses data breach affecting customers Amtrak… …
… "As I mentioned in that post, going forward I would be doing full public disclosure for any security bugs I found in VSCode." This follows another stream of zero-days in various Microsoft products disclosed by an anonymous security researcher using the 'Nightmare Eclipse' online handle who also exp… …
… In March, the hacker group also compromised Aqua Security's Trivy vulnerability scanner , which is believed to have led to cascading compromises affecting Aqua Security Docker images and the Checkmarx KICS project . …
… "We have communicated with our customers throughout this process and will continue to provide relevant updates as more information becomes available," the cybersecurity company said, adding that customers can find recommendations on the Support Portal or in the Security Updates sections. …