Dirty Frag Won't Be The Last Exploit
CopyFail Compromises The Last 9 Years Of Linux Distros
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
Another Linux Distro Dropped Deepin Desktop
This Linux Bug Gives Attackers Root
IPv8 Changes Everything We Know About IP
…locking out AMD to secure total Intel exclusivity, delaying the purchase or use of AMD microprocessors, limiting, delaying or constraining marketing, promotion, launch, advertising, production, distribution, sale or branding of any product…
Security Gartner suggests Friday afternoon Copilot ban because tired users may be too lazy to check its mistakes Admins may be even more exhausted by then, because securing Microsoft’s AI helper…
…coordinated vulnerability disclosure, the process of giving developers time to patch a bug before it is publicly discussed. “We've seen Mythos Preview accomplish things that a senior security researcher would be…
…These disclosures also follow reports that threat actors have started actively exploiting the Copy Fail vulnerability in attacks. The Cybersecurity and Infrastructure Security Agency (CISA) has added Copy Fail to its list…
https://securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
…Together, the production signal enrichment, AI-assisted remediation, and secure handling of findings within a single workflow help security and developer teams focus on real risk and act quickly. Furthermore, as more…
Linux Out-Of-Bounds Access Fixed For Unprivileged Users With Specially Crafted Certs Written by Michael Larabel in Linux Security on 12 April 2026 at 02:45 PM EDT. 34 Comments An…
…While Microsoft doesn't mention this in its advisory, other security shops pointed out that the Defender bug matches exploit code called BlueHammer , published on GitHub earlier this month by a disgruntled…
…product-security/bulletin/amd-sb-4004.html Acknowledgement AMD thanks researcher Muyan Shen, Institute of Software, Chinese Academy of Sciences for reporting this issue and engaging in coordinated vulnerability disclosure. Revisions Revision…
…The issue was flagged by an independent security researcher on May 15. Mullvad VPN acknowledged the disclosure promptly and published a detailed technical breakdown on its blog . For most users, no action…
…Last month, Security researcher Chaotic Eclipse (aka Nightmare-Eclipse ) published two zero-day exploits, BlueHammer and RedSun , that made Windows Defender offer up system administrator privileges. They did this after their disclosure…