This Linux Bug Gives Attackers Root
The First Exploit - Pwn2Own Documentary (Part 2)
Dirty Frag Won't Be The Last Exploit
Sorry Windows 10 Users...
Firefox JIT Bug - Pwn2Own Documentary (Part 3)
An initiative to secure the world's software | Project Glasswing
Microsoft Windows Agentic AI Malware
AI Is Hacking Everything Now...
Intel again making chips for Apple? Googlebook + [UNNAMED] OS - Talking Heads Ep.432
A Vulnerability to Hack The World - CVE-2023-4863
MechaCon: PS2s Unbreakable Gatekeeper ...Until it wasn't
Everyone's getting hacked
…A serious exploit kit called DarkSword was just released on GitHub, and security experts warn that anyone can use it without special iOS knowledge. TechCrunch reports that the exploit links weaknesses in…
…The news also comes almost two months after Xiaomi’s security lab discovered an exploit to enable bootloader unlocking on the firm’s Snapdragon 8 Elite Gen 5 phones. However, this exploit…
…root access by exploiting unpatched kernel flaws,” researchers from security firm Aviatrix wrote Monday . “With proof-of-concept exploits publicly available and signs of limited in-the-wild exploitation, organizations must act…
Security researcher Chaotic Eclipse, also known online as Nightmare-Eclipse, has disclosed two new Windows zero-day exploits named YellowKey and GreenPlasma. The vulnerabilities target BitLocker encryption and Windows privilege handling respectively…
A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it
I co-founded a successful security company close to the Mythos ecosystem and have spoken with participants in the know and I am deeply concerned. We, collectively, have answers for some but not all of the problems ahead …
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
For over a decade, I’ve been doing bug bounty, security audits, and security consulting. And if there’s one thing I’ve seen repeatedly, it’s this:Most startups call a security engineer or hire a security agency only when…
This is something that has been bouncing around my head for the past couple weeks with the flood of security related news around Mythos and the number of 0days being found.Microkernels, unikernals, hardware-enforced capa…
…We encourage end users to apply security updates as they become available from device makers. The statement attributes the research behind the GBL exploit to the Xiaomi ShadowBlade Security Lab, and notes…
…The GreenPlasma exploit GreenPlasma is a privilege escalation security issue that could be exploited to obtain a shell with SYSTEM permissions. Chaotic Eclipse describes it as a "Windows CTFMON Arbitrary Section Creation…
…Google found that an AI model likely helped the threat actors discover and exploit the security flaw in the code. Their Python script was very detailed, with tutorial‑style comments and docstrings…
…On Thursday, Microsoft announced mitigations for a high-security Exchange Server vulnerability that's being actively exploited by hackers. All an attacker needs to do is send a specially crafted email that…
…open-source mail transfer agent could be exploited by an unauthenticated remote attacker to execute arbitrary code. Identified as CVE-2026-45185 , the security issue impacts some Exim versions before 4.99…
…Now, Apple has published the security content for the updates, confirming that they address kernel and WebKit vulnerabilities associated with the Coruna exploit, and that they fix it on “devices that cannot…