This Linux Bug Gives Attackers Root
A Vulnerability to Hack The World - CVE-2023-4863
AI Is Hacking Everything Now...
An initiative to secure the world's software | Project Glasswing
Sorry Windows 10 Users...
Everyone's getting hacked
Ubuntu under attack, Big flaw affects all Linux distros, Linux beats Windows - Linux Weekly News
…exploit for one of the now patched vulnerabilities (CVE-2026-2796). "To be clear, the exploit that Claude wrote only works within a testing environment that intentionally removes some of the security…
…Nvidia urges users to update GPU drivers due to security vulnerabilities Fixes for these vulnerabilities are available for both Windows and Linux users, and are already deployed within the latest GeForce Game…
…Will Dormann, principal vulnerability analyst at Tharros, also confirmed the exploit works in his tests on the latest public version of Windows 11. However, he said that the flaw does not work…
…CVE-2026-26144 is a critical-severity information disclosure vulnerability in Microsoft Excel. This cross-site scripting flaw can be exploited to "cause Copilot Agent mode to exfiltrate data via unintended network…
…Critical SQL injection flaw now targeted in attacks By Bill Toulas May 22, 2026 09:14 AM Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability…
TweakTown News Hacking, Security & Privacy TL;DR: Google's Threat Intelligence Group identified a zero-day exploit likely created with AI targeting a popular open-source admin tool, enabling hackers to bypass…
Funnel Builder WordPress plugin bug exploited to steal credit cards By Bill Toulas May 15, 2026 03:30 PM A critical vulnerability in the Funnel Builder plugin for WordPress is being actively…
I co-founded a successful security company close to the Mythos ecosystem and have spoken with participants in the know and I am deeply concerned. We, collectively, have answers for some but not all of the problems ahead …
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
I've been running a small fleet of honeypots for about a year. They get hit by a mix of research scanners (Censys, Shadowserver, etc.), old worms, and a bump of CVE probes the day a new Nuclei template ships. The data wa…
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin By Bill Toulas May 14, 2026 05:07 PM Hackers are leveraging a critical authentication bypass vulnerability in the WordPress plugin Burst…
…security chip. Meanwhile, Google is slashing payouts for basic Android and Chrome vulnerabilities and cutting several bonus categories. Researchers can still earn up to $250,000 for full-chain Chrome exploits, and…
…Timeline of DarkSword observations and vulnerability patches. Image credit: Google Apple's security notes for iOS 26.3 say the dyld vulnerability may have been used in highly targeted attacks. Fully…