Dirty Frag Won't Be The Last Exploit
CopyFail Compromises The Last 9 Years Of Linux Distros
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
Another Linux Distro Dropped Deepin Desktop
This Linux Bug Gives Attackers Root
IPv8 Changes Everything We Know About IP
…To secure systems against attacks, Linux users can use the following command to remove the vulnerable esp4, esp6, and rxrpc kernel modules (however, it's important to note that this will break…
…When security embargoes are broken early or disclosures otherwise made before mitigations are ready, there can be an unfortunate wait for downstreams of RHEL. With the optional Rocky Linux security repository, they…
Back to Security Bulletins and Briefs Mishandling Resource Contention in AMD Processors Summary Researchers reported a microarchitectural side channel via the AMD bug bounty program. The researchers describe a microarchitectural timing side…
…Key details remain unverified as scrutiny builds LinkedIn's published disclosures acknowledge extensive use of cookies and third-party tracking tools for analytics and advertising. Disclosures don't mention scanning…
https://securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
…Uncovering Flaws in Open-Source Vulnerability Disclosure ”. The tutorial is divided into “legal” and “illegal” parts. Meaning the reader can stop at any stage and decide to move from vulnerability disclosure to…
…More details on these libinput security issues via today's advisory . As a result of these disclosures, libinput 1.31.1 and libinput 1.30.3 have been released with security fixes…
Back to Security Bulletins and Briefs Cache-based Side-Channel Attack Against SEV AMD ID: AMD-SB-3010 Potential Impact: N/A Severity: N/A Summary AMD has received a report from…
Microsoft has released mitigation guidance for YellowKey, the publicly disclosed BitLocker bypass now tracked as CVE-2026-45585, after a working proof of concept was published without coordinated disclosure. No full security…
…We also support coordinated vulnerability disclosure, a widely adopted industry practice that helps ensure issues are carefully investigated and addressed before public disclosure, supporting both customer protection and the security research community…
…This round of disclosures mostly with the impact of being able to read uninitialized memory. See today's security bulletin for more information on these latest vulnerabilities. X.Org Server 21.1…