VLOG Thursday 491: Firewall Vulnerabilities & Security, Virtualization & Homelab Q&A
VLOG Thursday 490: UniFi, Vulnerabilities & Security, Virtualization & Homelab Q&A
I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities)
MSI Trades Security for RGB
AMD Gaslights Security Researcher, Changes Rules Retroactively
Reinventing Web Security
Security-driven Rapid Release - Pwn2Own Documentary (Part 4)
A Vulnerability to Hack The World - CVE-2023-4863
Network Security Basics - Are you doing these things?
…begun working on a security patch for a Defender zero-day vulnerability named "ShieldBreak." A security researcher who uses the "Nightmare Eclipse" handle disclosed this privilege escalation vulnerability after Microsoft released the…
…accused Anthropic's Claude Code of containing what it describes as "security backdoor vulnerabilities" after the country's National Vulnerability Database (CNVDB) found mechanisms capable of transmitting user information to Anthropic servers…
…Nothing.’ Latest in Security In Brief Iran abused mobile networks’ vulnerabilities to locate US military in the Middle East, report says Security Telegram’s shortlink domain is back online after day-long…
…According to Google, none of these security vulnerabilities are being exploited in the wild yet. In the Chrome Releases blog post, Srinivas Sista lists the 151 fixed security vulnerabilities in question, with…
Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI. https://www.securityweek.com/oracle-patches-over-1400-vulnerabilities-with-quarterly-security-updates/ submitted by…
China Says It Has Found Security Vulnerabilities in Anthropic's Claude Code
Grok 4.5 and GPT5.6 beat Anthropic for finding security vulnerabilities in PRs
I'm being hit with small, nitpick security vulnerabilities, like being able to IDOR profile images for other users on a self-hosted software.Then the submitters are spamming me to release a vulnerability, despite me mess…
By now, most of us know about the recent security vulnerabilities affecting TPM 2.0 modules across a wide range of Ryzen processors. I'm a strong believer that if it ain't broken, don't fix it. I have never updated my BI…
Security researchers have disclosed a proof-of-concept exploit capable of obtaining root access on Android 17 by combining vulnerabilities in Firefox for Android and the Linux kernel. The exploit chain, called…
…Cybersecurity and Infrastructure Security Agency (CISA) added the two flaws to its Known Exploited Vulnerabilities (KEV) Catalog on July 14, ordering Federal Civilian Executive Branch (FCEB) agencies to patch their systems within…
In the new Chrome versions 146.0.7680.75/76 for Windows and macOS, and 146.0.7680.75 for Linux, the developers have fixed two security vulnerabilities. According to Google, both…
…government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents. Tracked as CVE-2026-0770 , this critical security flaw allows unauthenticated threat actors to…
…an agent or a developer adds a comment, reformats a file, or moves a function, and a naive vulnerability tracker suddenly reports the same finding twice. Security teams end up re-triaging…
…As ESET notes , "what makes these old shims dangerous is not a novel vulnerability, it's that no new vulnerability is needed to bypass UEFI Secure Boot." Microsoft has revoked trust in…
