This Linux Bug Gives Attackers Root
A Vulnerability to Hack The World - CVE-2023-4863
AI Is Hacking Everything Now...
732 bytes of Python just borked every Linux machine on earth…
Sorry Windows 10 Users...
My theory on how the webp 0day was discovered #short
My theory on how the webp 0day was discovered (BLASTPASS)
An initiative to secure the world's software | Project Glasswing
Ubuntu under attack, Big flaw affects all Linux distros, Linux beats Windows - Linux Weekly News
…The first attacks on Microsoft Exchange Server occurred as early as Patch Tuesday week, abusing a vulnerability that still hasn't been fixed and continues to be exploited by hackers. Meanwhile, Microsoft…
…At the time, the vulnerability was neither publicly known nor exploited, according to Microsoft, which deemed exploitation "less likely." Fast forward to Wednesday when the US Cybersecurity and Infrastructure Agency added CVE…
…However, the process of fully exploiting the vulnerability is quite complex and doesn't always work. Furthermore, the researcher who discovered the vulnerability published their exploit code with deliberate flaws to prevent…
…The details published on Tuesday paint a stark picture for the security community: "During our testing, we found that Mythos Preview is capable of identifying and then exploiting zero-day vulnerabilities in…
Head over to Netomize's blog to learn about how we detect the exploitation of the CrushFTP Vulnerability (CVE-2025-31161) with PacketSmith's Yara detection module, using the newly introduced track_state and flow_state ke…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
I co-founded a successful security company close to the Mythos ecosystem and have spoken with participants in the know and I am deeply concerned. We, collectively, have answers for some but not all of the problems ahead …
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
On May 7, Hyunwoo Kim (V4bel) disclosed Dirty Frag — two Linux kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500) that give unprivileged users deterministic root on most Linux distributions shipped since 2017. Mi…
…Over the weekend, security researchers released PoC exploits targeting another recently patched Linux LPE (tracked as DirtyDecrypt and DirtyCBC ), which belongs to the same vulnerability class as several other root-escalation flaws…
…account, and after running the exploit, it opened a command prompt with SYSTEM privileges, as shown in the image below. Will Dormann, principal vulnerability analyst at Tharros, also confirmed the exploit works…
…However, V12's proof-of-concept exploit has only been tested against Fedora and the mainline Linux kernel. DirtyDecrypt belongs to the same vulnerability class as several other root-escalation flaws disclosed…
…Telemetry data from Wordfence firewall and malware scanner for WordPress shows that the vulnerability is being exploited in the wild to create rogue administrator accounts. “The attacker submits a value for a…
…Google didn't reveal the bad actors either, but hinted at those associated with China and North Korea having shown "significant interest" in using AI for exploiting security vulnerabilities. With how fast…
…attacks by applying interim mitigations for high-risk (and likely actively exploited) vulnerabilities. EEMS runs as a Windows service on Exchange Mailbox servers and is automatically enabled on servers with the Mailbox…