Dirty Frag Won't Be The Last Exploit
CopyFail Compromises The Last 9 Years Of Linux Distros
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
Another Linux Distro Dropped Deepin Desktop
This Linux Bug Gives Attackers Root
IPv8 Changes Everything We Know About IP
…MORE CONTEXT Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two…
…Cybersecurity and Infrastructure Security Agency (CISA) gave U.S. government agencies 4 days to secure their systems against CVE-2026-1340 attacks. Multiple other Ivanti EPMM zero-days have been exploited in…
…The Donjon team says it followed a responsible disclosure process and informed MediaTek before making the vulnerability public. MediaTek confirmed to the security research firm that it provided fixes to device manufacturers…
…It can be used to deceive employees, partners, or customers by presenting falsified information within trusted SharePoint environments." ® patches excel cybersecurity and infrastructure security agency vulnerability security
https://securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
…It also looks like we’ll get a new security chip, modem, image signal processor, and TPU. We’ve already seen some leaked Tensor G6 specs, giving us a rough idea of…
…Intel Secures Another Crucial DoW Contract, After Being a Part of the "Secure Enclave" Program Intel has a long history of securing contracts with the Department of War (DoW), as the last…
…In February, Cisco patched another Catalyst SD-WAN Manager information disclosure security flaw (CVE-2026-20133), which CISA flagged as actively exploited in late April, and, two weeks later, warned that two…
…Known as Fragnasia and tracked as CVE-2026-46300 , this security flaw stems from a logic bug in the Linux XFRM ESP-in-TCP subsystem that can enable unprivileged local attackers to…
…The legal disclosure says that Hasbro spotted unauthorized access to the corporate network on March 28. The discovery prompted the toy giant to perform its security response protocols. The filing adds that…
…Large enterprises even use SecAlerts alongside their existing cyber security products. It allows security teams to see what their other tools might be missing. The Bottom Line The cybersecurity battleground is defined…