Dirty Frag Won't Be The Last Exploit
CopyFail Compromises The Last 9 Years Of Linux Distros
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
Another Linux Distro Dropped Deepin Desktop
This Linux Bug Gives Attackers Root
IPv8 Changes Everything We Know About IP
…GFN.am says it took "immediate measures" to lock it systems down and harden its security against future attacks. The disclosure comes after a supposed ShinyHunters threat actor published alleged samples of…
…compute load Feross Aboukhadijeh, CEO of security biz Socket, told The Register in an email that CVEs are just one part of the coordinated disclosure, so CVE publication should not be expected…
Nearly every Linux distribution released since 2017 is currently vulnerable to a security bug called “Copy Fail” that allows any user to give themselves administrator privileges. The exploit, publicly disclosed as…
…Fortunately, that disclosure does not include the code needed to execute the exploit, but it does paint a concerning picture for Windows users hoping to keep their PCs secure. Hopefully Microsoft can…
https://securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
…Hij doet onderzoek naar vulnerability management en disclosure en heeft bijgedragen aan talloze internationale toonaangevende beleidsstukken over vulnerability disclosure en de Richtlijn Coordinated Vulnerability Disclosure van NCSC. Rory is chief information security…
Following last week's disclosure of the Dirty Frag vulnerability for the Linux kernel, which only finished being patched up in mainline on Monday, Fragnesia is now public as a similar local…
…This solid environmental management led ASUS to achieve a Double ' A ' rating in the 2025 CDP (Carbon Disclosure Project) for both Climate Change and Water Security. Simultaneously, the company integrates sustainability principles…
…Researcher Chaotic Eclipse disclosed both vulnerabilities, publicly known as RedSun and UnDefend, without coordinated disclosure. They had no CVEs and no fixes when first released. Endpoint security firm Huntress confirmed active exploitation…
…support coordinated vulnerability disclosure, a widely adopted industry practice that helps ensure issues are carefully investigated and addressed before public disclosure, supporting both customer protection and the security research community," a Microsoft…
Nvidia has released one of its rare security bulletins over the last 24 hours, disclosing 15 security vulnerabilities that affect its Windows and Linux graphics drivers. Nine are marked as "high-severity…