Dirty Frag Won't Be The Last Exploit
CopyFail Compromises The Last 9 Years Of Linux Distros
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
Another Linux Distro Dropped Deepin Desktop
This Linux Bug Gives Attackers Root
IPv8 Changes Everything We Know About IP
…This round of disclosures mostly with the impact of being able to read uninitialized memory. See today's security bulletin for more information on these latest vulnerabilities. X.Org Server 21.1…
…security.ubuntu.com jaas.ai archive.ubuntu.com canonical.com maas.io blog.ubuntu.com developer.ubuntu.com Ubuntu Security API – CVEs Ubuntu Security API – Notices academy.canonical.com ubuntu.com portal…
Thanks to AI-assisted security research, hackers with hats of various colors are finding exploits everywhere. Linux has had its worst week in years with the CopyFail and Dirty Frag root-gaining…
…Haber, Chief Security Advisor, BeyondTrust Morey J. Haber is the Chief Security Advisor at BeyondTrust. As the Chief Security Advisor, Morey is the lead identity and technical evangelist at BeyondTrust. He has…
https://securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
…We also support coordinated vulnerability disclosure, a widely adopted industry practice that helps ensure issues are carefully investigated and addressed before public disclosure, supporting both customer protection and the security research community…
…In the thread of Rebane’s disclosure to Google, two developers said in separate responses that it was a “serious vulnerability.” Its severity was rated S1, the second-highest classification. Since its…
…Security Support - AMD looks for ways to make our products more secure, including working closely with partners, academics, researchers, and end users in the ecosystem. We follow coordinated vulnerability disclosure practices and…
Back to Security Bulletins and Briefs AMD Server Software and Embedded Chipset Driver Vulnerabilities Identified in Windows® Environments Summary Researchers reported vulnerabilities within AMD Secure Processor (ASP) PCI, general-purpose input/output…
…Developing technologies that endeavor to support robust security and privacy is a priority for Qualcomm Technologies. We commend the researchers from the Xiaomi ShadowBlade Security Lab for using coordinated disclosure practices. Regarding…
…Blender 5.2 LTS Enters Beta With New Features AI-Driven Security Disclosures, NVIDIA Vera & Linux 7.1 Features That Made An Exciting May Servo 0.2 Released With Revamped Android Browser…