Alte EintrΓ€ge (Archiv)

Keywords: cve, exploit, vulnerability, 0day, rce, uvm. | Letztes Update: 10.09.2026 14:51

AWS Strands Agents Tools Received Four CVEs in 23 Days
πŸ“… 26.08.2026 23:06
Log4j2 0-Day
πŸ“… 26.08.2026 22:39
Hackers now exploit critical Gitea flaw in code injection attacks
πŸ“… 26.08.2026 14:39
Vulnerability researchers were repeatedly targeted by trojanised exploits
πŸ“… 26.08.2026 10:42
CVE-2026-18963 – Keycloak Reset-Credentials Bypass β†’ Account Takeover
πŸ“… 25.08.2026 22:35
When str.lower() is a security vulnerability in Python – Seth Larson
πŸ“… 25.08.2026 20:49
Local Privilege Escalation via the NetBird Client Daemon IPC
πŸ“… 25.08.2026 11:31
Time-to-exploit is now negative: attacks begin before the patch ships
πŸ“… 25.08.2026 08:57
Omarchy Exploit
πŸ“… 25.08.2026 05:51
Ask HN: What's the current state of Quantum Vulnerability
πŸ“… 25.08.2026 03:52
OpenKAT: Monitoring Tool and Vulnerability Scanner
πŸ“… 24.08.2026 20:51
No Place to Hide? Regional Resil. & Vulnerability to Global Catastrophic Risk
πŸ“… 24.08.2026 19:03
LLMs could control their host machines by exploiting inference engines
πŸ“… 24.08.2026 19:03
VulnOptiCON 2026 – The Future of Vulnerability, Threats and Cybersecurity Risk
πŸ“… 24.08.2026 15:12
Zero-click vulnerability in Grok allows silent data exfiltration
πŸ“… 24.08.2026 07:46
AI scanner AgentGG found GeoServer SQL injection before zero-day
πŸ“… 23.08.2026 21:57
2-click code execution vulnerability on Omarchy Linux
πŸ“… 23.08.2026 16:06
Microsoft Entra ID Remote Code Execution Vulnerability
πŸ“… 23.08.2026 01:29
Show HN: GPU VulnDB – open vulnerability database for GPU infrastructure
πŸ“… 20.08.2026 17:09
VulnGym: Benchmarking Coding Agents for Repository-Level Vulnerability Detection
πŸ“… 20.08.2026 15:41
Type Confusion Vulnerability in isolated-VM
πŸ“… 20.08.2026 13:38
An approach to vulnerability observability of Go services leveraging Prometheus
πŸ“… 20.08.2026 10:38
Test-Time Scaling in the Wild: Why Exploitation, Not Exploration
πŸ“… 20.08.2026 08:07
"Half-Day": 0-Day in the Age of AI
πŸ“… 19.08.2026 23:03
When str.lower() is a security vulnerability in Python
πŸ“… 19.08.2026 12:42
Show HN: CLI tool to check n8n instances for CVE-2026-21858 credential exposure
πŸ“… 19.08.2026 11:29
CVE-2026-24301: "CoSnitch" vulnerability in Microsoft Copilot
πŸ“… 19.08.2026 10:29
GitLab CVE-2026-19478: GraphQL authorization bypass
πŸ“… 19.08.2026 07:29
CISA: Windows Task Host flaw now exploited by ransomware gangs
πŸ“… 18.08.2026 15:31
Microsoft working on Defender patch for ShieldBreak zero-day
πŸ“… 18.08.2026 11:43
Hackers exploit macOS Screen Sharing flaw to deploy Monero miner
πŸ“… 17.08.2026 13:42
The Metabase SQLi: Exploited in the Wild
πŸ“… 16.08.2026 23:45
Growth of CVEs fixed in Postgres looks exponential
πŸ“… 16.08.2026 07:30
Vulnerability giving attackers full control of Macs is under active exploitation
πŸ“… 15.08.2026 07:32
Someone is publishing a trove of zero-days
πŸ“… 15.08.2026 02:13
Vulnerability giving attackers full control of Macs is under active exploitation
πŸ“… 14.08.2026 22:07
Wallabag Full Disclosure CVSS8.5 Stored XSS+SSRF after no patched no cve
πŸ“… 14.08.2026 16:41
NIST Seeks Blueprint for AI-Era Overhaul of National Vulnerability Database
πŸ“… 14.08.2026 16:07
Why AI-generated vulnerability patches still require expert human review
πŸ“… 14.08.2026 10:44
You're Back in the Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))
πŸ“… 14.08.2026 08:10
LoongLeak: A Vulnerability Affecting Chinese Loongson 3A5000 and 3A6000 CPUs
πŸ“… 13.08.2026 15:21
We eliminated 1,400 CVEs in NanoClaw's container images
πŸ“… 13.08.2026 14:18
Hackers steal over $130M by exploiting bug in offline hardware wallets
πŸ“… 13.08.2026 11:56
Lazarus hackers exploited Windows zero-day to target defense firms
πŸ“… 12.08.2026 17:41
New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges
πŸ“… 12.08.2026 15:36
A BSON symbol namespace bypasses MongoDB's authorization check (CVE-2026-18690)
πŸ“… 12.08.2026 15:24
From AKS node root vulnerability to Microsoft Copilot hijack
πŸ“… 12.08.2026 15:02
Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot
πŸ“… 12.08.2026 14:02
Cellebrite zero-day exploit used to target phone of Serbian student activist
πŸ“… 12.08.2026 11:01
RoguePlanet Vulnerability Still Exploitable
πŸ“… 12.08.2026 10:35
Framework loses customer data in Metabase zero-day attack
πŸ“… 12.08.2026 07:47
CVE-2026-53361 AF_Unix GC vs. MSG_PEEK use-after-free container escape
πŸ“… 12.08.2026 03:31
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days
πŸ“… 11.08.2026 18:44
Feds warn Gunra ransomware is exploiting known bugs hit critical infrastructure
πŸ“… 11.08.2026 16:40
Zoomsday How a Security Found a Nation-State Vulnerability in Zoom in One Day
πŸ“… 11.08.2026 15:51
AI Is Accelerating Vulnerability Discovery
πŸ“… 11.08.2026 15:38
The Victim Is the Exploit
πŸ“… 11.08.2026 14:00
Expat 2.8.3 released, fixes vulnerability CVE-2026-72522
πŸ“… 11.08.2026 13:23
CVE-2026-56852: x/text/Unicode/norm infinite loop on invalid UTF-8 (DoS)
πŸ“… 11.08.2026 11:04
Cyber vulnerability sweep picks up Royal Navy drones sending data to China
πŸ“… 11.08.2026 06:53
Human Approval Is a Privilege Escalation Path
πŸ“… 10.08.2026 23:25
We cut a 40-day financial integration down to 5 days using Google Anti
πŸ“… 10.08.2026 21:27
Vulnerability Prioritization with Broadsheet.sh
πŸ“… 10.08.2026 21:18
CVE-2026-65400: Apple macOS Screen Sharing authentication bypass
πŸ“… 10.08.2026 18:16
Security Vulnerability in Pioneer Rekordbox
πŸ“… 10.08.2026 18:11
NCAA and FBI partner up to help athletes avoid being sexually exploited online
πŸ“… 10.08.2026 17:41
OpenAI launches GPT-5.6-Cyber with fewer refusals for exploit research
πŸ“… 10.08.2026 17:22
Exploiting System Management Mode with a very long interrupt
πŸ“… 10.08.2026 16:03
Critical Progress LoadMaster flaw now actively exploited in attacks
πŸ“… 10.08.2026 15:17
When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers
πŸ“… 10.08.2026 12:59
Banking AI XSS: The exploit is in the payment reference
πŸ“… 10.08.2026 12:51
Diffusion LLMs as Targets and Adversaries: Mechanistic Safety Exploits
πŸ“… 10.08.2026 07:07
macOS vulnerability: authenticate Screen Sharing without valid credentials
πŸ“… 08.08.2026 18:58
OpenAI Trained Models While They Were Coordinating Exploits via Message Boards
πŸ“… 08.08.2026 15:39
OpenAI Trained Models for Months While Those Models Were Coordinating Exploits
πŸ“… 08.08.2026 03:57
Metabase SQLi zero-day exploited in customer data-theft attacks
πŸ“… 07.08.2026 22:07
Linux Patched for Safe RET Interrupt Vulnerability
πŸ“… 07.08.2026 22:01
A 0-Click Exploit Chain for the Pixel 10
πŸ“… 07.08.2026 21:49
WordPress CVE-2026-64638 Pre-Auth XSS to RCE
πŸ“… 07.08.2026 19:30
SLOs from Mesh Metrics: A 30-Day Implementation Playbook
πŸ“… 07.08.2026 19:27
The Keychain CVE Where Every Key Fits
πŸ“… 07.08.2026 17:45
OpenAI Trained Its Models for Months While They Coordinated Exploits
πŸ“… 07.08.2026 16:56
SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems
πŸ“… 07.08.2026 06:07
AI-generated vulnerability patches still require expert human review
πŸ“… 07.08.2026 05:26
Framework discloses data breach via Metabase 0-day
πŸ“… 07.08.2026 05:17
Arbitrage Exists Between Kalshi and Polymarket but You Can't Exploit It
πŸ“… 06.08.2026 23:47
Prompt Injection Vulnerability in Ollama, Gemma4 and HuggingFace's Transformers
πŸ“… 06.08.2026 23:03
0-day security update available for Metabase
πŸ“… 06.08.2026 22:56
"not a single vulnerability was found by a US frontier model."
πŸ“… 06.08.2026 21:27
Linux Patched for Safe RET Interrupt Vulnerability
πŸ“… 06.08.2026 17:58
Zapscape (CVE-2026-64561)
πŸ“… 06.08.2026 16:24
Why AI-generated vulnerability patches still require expert human review
πŸ“… 06.08.2026 15:58
Servers can be backdoored by exploiting buggy motherboard controll
πŸ“… 06.08.2026 07:01
Zero-Day to Zero Doubt: AI-Powered CVE Forensics in an Afternoon
πŸ“… 05.08.2026 14:56
So What's Up with That New CPanel Database Vulnerability?
πŸ“… 04.08.2026 23:39
Hackers steal over $130M by exploiting bug in offline hardware wallets
πŸ“… 04.08.2026 22:54
AI slop pollutes the CVE pipeline with fake vulns
πŸ“… 04.08.2026 13:43
Bitcoin owners rocked by $116M hack: What we know about the Coldcard exploit
πŸ“… 04.08.2026 05:43
AI slop pollutes the CVE pipeline with fake vulns
πŸ“… 03.08.2026 18:24
Critical CVE issued for hallucinated SQLite vulnerability
πŸ“… 03.08.2026 11:28
Coldcard Bitcoin Exploit Balloons to $88M as Attackers Keep Draining Wallets
πŸ“… 02.08.2026 18:36
Send and Pretend: Exploiting Transcript Consistency Issues in E2EE Group Chats
πŸ“… 02.08.2026 00:07
Coldcard's $38M (so far) exploit shakes faith in self-custody
πŸ“… 01.08.2026 21:12
Tlbic v9.0:A System Built on Vulnerability, Care Ethics, and Bottom‑Up Oversight
πŸ“… 01.08.2026 11:53
Debian CVE Fixes over Time
πŸ“… 01.08.2026 10:09
Privilege Escalation in AWS Elastic Kubernetes Service (2023)
πŸ“… 31.07.2026 23:53
Show HN: RØØT – Offline security workspace for labs, CVEs, and tooling
πŸ“… 31.07.2026 17:23
Oracle VM VirtualBox Bug Discovered by AI: CVE-2026-60161
πŸ“… 31.07.2026 17:08
Anti-fraud tools can't keep pace with scammers exploiting cheap internet calling
πŸ“… 31.07.2026 13:28
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
πŸ“… 31.07.2026 12:12
What do you use for automated web app vulnerability scanning?
πŸ“… 31.07.2026 09:58
CDN Tsunami: Exploiting HTTP/3-HTTP/1.1 Conversion for DoS Attacks
πŸ“… 31.07.2026 04:07
Debian CVE Fixes over Time
πŸ“… 30.07.2026 16:24
CVE-2026-64560: Linux UAF
πŸ“… 30.07.2026 15:46
Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
πŸ“… 30.07.2026 15:30
AI-generated, Lean-verified proof of Collatz conjecture exploits Lean kernel bug
πŸ“… 30.07.2026 14:26
Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit
πŸ“… 30.07.2026 11:09
Cisco FMC static credential vulnerability exploited as a zero-day
πŸ“… 30.07.2026 08:33
Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)
πŸ“… 29.07.2026 21:37
OpenAI models used Artifactory zero-days to escape to the internet
πŸ“… 29.07.2026 14:13
AI-found bugs aren't proving any easier to exploit despite the hype
πŸ“… 29.07.2026 11:57
Adaptive Agentic Attacks on LLM Vulnerability Detectors via Adversarial Comments
πŸ“… 29.07.2026 11:48
ExploitGym AI benchmark source code
πŸ“… 29.07.2026 07:40
Claude Mythos Preview Finds Vulnerability in Weakened Form of AES
πŸ“… 29.07.2026 06:24
Mapping CVEs to Mitre ATT&CK Techniques
πŸ“… 29.07.2026 05:53
OpenAI models used Artifactory zero-days to escape to the internet
πŸ“… 29.07.2026 00:07
Wordfence Prism AI Vulnerability Detector Finds Backdoored WordPress Plugin
πŸ“… 28.07.2026 21:29
Show HN: Verifiable receipts for firmware CVE reproduction
πŸ“… 28.07.2026 20:53
AI-found bugs aren't proving any easier to exploit despite the hype
πŸ“… 28.07.2026 20:07
Russian hackers exploit Zimbra zero-click flaw for email theft
πŸ“… 28.07.2026 19:29
Fast Remediation Is the New Trust Model (JFrog and OpenAI Zero-Day Findings)
πŸ“… 28.07.2026 12:02
When AI Makes 0-Days Feel Like N-Days
πŸ“… 28.07.2026 10:40
Childhood exposure to pornography and the normalization of online exploitation
πŸ“… 28.07.2026 10:40
Street videos 'exploiting' vulnerable people
πŸ“… 28.07.2026 03:10
Copyright Scammers Weaponized Meta's Rights Manager with Backdating Exploit
πŸ“… 28.07.2026 01:14
Exploiting Volvo/Eicher's fleet platform to gain control over all users/vehicles
πŸ“… 27.07.2026 15:08
Copyright Scammers Weaponized Meta's Rights Manager with Backdating Exploit
πŸ“… 27.07.2026 15:02
Antares: Highly Efficient Open Weight AI Models for Vulnerability Localization
πŸ“… 27.07.2026 05:13
Show HN: An interactive way to exploit an LLM without going to jail
πŸ“… 26.07.2026 18:16
CVE-2026-49176 Exploit Development: WalletService to System
πŸ“… 26.07.2026 12:46
ExploitGym – Can AI Agents Turn Security Vulnerabilities into Real Attacks?
πŸ“… 25.07.2026 21:17
Car Hacking and Vulnerability Reporting in 2026
πŸ“… 25.07.2026 19:35
Visa Vulnerability Agentic Harness – Agentic SAST Pipeline
πŸ“… 25.07.2026 15:28
Who's making money from using/exploiting AI?
πŸ“… 25.07.2026 14:11
Escaping Claude Cowork's local VM sandbox via CVE-2026-46331
πŸ“… 25.07.2026 03:56
Visa: Vulnerability Agentic Harness
πŸ“… 25.07.2026 02:56
The SharePoint zero-day panic this week is a marketing event
πŸ“… 25.07.2026 00:14
Oracle VM VirtualBox Bug Discovered by AI: CVE-2026-60161
πŸ“… 24.07.2026 19:08
Kimi K3 found 19 0days in latest Redis 8.8.0 in 1.5hrs
πŸ“… 24.07.2026 07:30
How Apple's Hide My Email exploit worked and why you're still at risk
πŸ“… 23.07.2026 20:11
Kimi K3 exploited the latest Redis server
πŸ“… 23.07.2026 17:10
Ask HN: Which CVEs should I add to my Python security benchmark for AI agents?
πŸ“… 23.07.2026 14:10
Full Disclosure: A project is publishing full analyses of AI-discovered 0-days
πŸ“… 23.07.2026 12:41
Antares: Highly Efficient Open Weight AI Models for Vulnerability Localization
πŸ“… 23.07.2026 08:47
GitHub issues $100k bounty for critical RCE vulnerability
πŸ“… 23.07.2026 01:33
Dirty-Pedit (CVE-2026-46331): Novel page-cache corruption LPE exploit
πŸ“… 22.07.2026 23:07
RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS
πŸ“… 22.07.2026 22:41
Antares from Cisco: Highly Efficient Open Models for Vulnerability Localization
πŸ“… 22.07.2026 22:33
RefluXFS: LPE in the Linux kernel via XFS reflink race (CVE-2026-64600)
πŸ“… 22.07.2026 18:20
Linux kernel team publishes 432 CVEs in two days
πŸ“… 22.07.2026 17:29
I was reporter #11 for a WPForms PayPal webhook vulnerability
πŸ“… 22.07.2026 14:25
Linux CVE flood with catchy names
πŸ“… 22.07.2026 10:23
Cisco Vulnerability Localization OpenWeight Model Antraes
πŸ“… 22.07.2026 07:04
OSS-SEC: 432 Linux kernel CVEs (in less than 32 hours)
πŸ“… 22.07.2026 00:05
Ask HN: GitHub CVE Delays?
πŸ“… 21.07.2026 23:31
Cisco releases Antares: open weight AI for vulnerability research
πŸ“… 21.07.2026 22:53
Furtex: Post-exploitation and evasion research toolkit for Linux
πŸ“… 21.07.2026 22:39
Adding Scaleway to Cartography without rewriting vulnerability management
πŸ“… 21.07.2026 18:52
What Modern NVMe Storage Can Do, and How to Exploit It [pdf]
πŸ“… 21.07.2026 16:53
Hackers exploiting recently patched WordPress bugs, websites at risk
πŸ“… 21.07.2026 16:10
Apple Fixes Hide My Email Vulnerability After 404 Media Coverage
πŸ“… 21.07.2026 15:31
Antares: Open Weight AI Models for Vulnerability Localization
πŸ“… 21.07.2026 14:42
Over 400 Linux CVEs published in the last 24 hours alone
πŸ“… 21.07.2026 14:16
7-Zip XZ Decompression Heap-Based Buffer Overflow RCE Vulnerability
πŸ“… 21.07.2026 13:46
Windows LegacyHive zero-day flaw gets free, unofficial patches
πŸ“… 21.07.2026 13:29
iOS 27 jailbreak with usbliter8 exploit
πŸ“… 21.07.2026 10:46
Windows Performance Exploitation
πŸ“… 21.07.2026 03:50
A Linux Kernel 0-day Journey – From a limited UAF to Physical Memory R/W
πŸ“… 20.07.2026 20:34
Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25
πŸ“… 20.07.2026 08:13
First evidence of WordPress wp2shell exploit being used in the wild
πŸ“… 20.07.2026 06:41
Wp2shell: A Critical Remote Code Execution Vulnerability in WordPress Core
πŸ“… 20.07.2026 04:44
Plumbing Homebrew into the Vulnerability Ecosystem
πŸ“… 19.07.2026 15:24
PS5 Y2JB Autoloader:Automatically loads the kernel exploit and your elf payloads
πŸ“… 19.07.2026 11:29
AI Assisted Vulnerability Research on Embedded Targets
πŸ“… 19.07.2026 00:40
Wp2shell (CVE-2026-63030): Pre-Auth RCE Chain in WordPress Core
πŸ“… 18.07.2026 21:23
Nvidia's CMP 170HX Full Compute and Memory (80GB) may be unlockable via exploit
πŸ“… 18.07.2026 16:41
Billion-dollar California salad company exploits undocumented migrants (2014)
πŸ“… 18.07.2026 10:13
Plumbing Homebrew into the Vulnerability Ecosystem
πŸ“… 17.07.2026 23:14
Windows 0-day drops the same day Microsoft releases record number of patches
πŸ“… 17.07.2026 21:13
GPT-5.6 Sol Ultra built a full Chrome V8 exploit chain from patch commits
πŸ“… 17.07.2026 20:55
New Windows LegacyHive zero-day gives hackers admin privileges
πŸ“… 17.07.2026 14:07
Show HN: Vulnsy – A platform for vulnerability management and reporting
πŸ“… 17.07.2026 11:02
Ask HN: Best approach to dependency vulnerability scanning in CI?
πŸ“… 17.07.2026 07:05
CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV
πŸ“… 16.07.2026 22:07
Evolving Windows vulnerability management to meet speed of AI-powered discovery
πŸ“… 16.07.2026 20:40
Visa Vulnerability Agentic Harness
πŸ“… 16.07.2026 17:36
Microsoft's July 2026 Patch Tuesday fixes 622 CVEs, 2 exploited zero-days
πŸ“… 16.07.2026 13:05
Zoom warns of critical account takeover vulnerability
πŸ“… 15.07.2026 22:44
Windows 0-day drops the same day Microsoft releases record number of patches
πŸ“… 15.07.2026 22:07
CVE-2026-15409: SonicWall SMA 1000 SSRF Zero-Day
πŸ“… 15.07.2026 18:53
CVE-2026-59208: Cross-Issuer Account Takeover in n8n
πŸ“… 15.07.2026 14:30
Baddies caught exploiting extensions bugs with perfect 10 on vulnerable Joomla
πŸ“… 15.07.2026 14:10
CISA warns admins to patch actively exploited SharePoint flaws
πŸ“… 15.07.2026 13:29
Show HN: VulnCast – open-source e-paper dashboard for live CVE/exploit Intel
πŸ“… 15.07.2026 07:17
Mako: A Self-Evolving Agentic Operating System for Autonomous Web Exploitation
πŸ“… 15.07.2026 03:17
Ongoing changes to Android security patches due to AI vulnerability discovery
πŸ“… 15.07.2026 00:25
Cyberstalkers Are Exploiting Chrome Sync to Spy on Victims
πŸ“… 14.07.2026 21:29
AI is straining vulnerability disclosure for maintainers
πŸ“… 14.07.2026 20:05
Cursor 0day: When Full Disclosure Becomes the Only Protection Left
πŸ“… 14.07.2026 17:58
Iran exploited mobile flaws to locate U.S. troops in the Middle East
πŸ“… 14.07.2026 15:35
Ongoing changes to Android security patches due to AI vulnerability discovery
πŸ“… 14.07.2026 03:53
Show HN: Free API of 248M aggregated VEX statements: 45% of CVEs not affected
πŸ“… 13.07.2026 23:07
Januscape vulnerability CVE-2026-53359 mitigations available (KVM breakout)
πŸ“… 13.07.2026 17:51
Screwing up vulnerability management at scale, and building a startup to fix it
πŸ“… 13.07.2026 16:50
Prescryb – an MCP server for CVE and config remediation
πŸ“… 12.07.2026 22:56
Apple Hide My Email bug, possibly related to disclosure vulnerability
πŸ“… 12.07.2026 01:05
We built a free CVE and threat-Intel command center – no login, no paywall
πŸ“… 12.07.2026 00:31
Ethereum deploys AI agents to hunt bugs, discovers libp2p vulnerability
πŸ“… 10.07.2026 23:09
Exploiting Sparsity for Long Context Inference: Million Token on Commodity GPUs
πŸ“… 10.07.2026 09:44
Build your own vulnerability harness
πŸ“… 10.07.2026 01:28
Patch for Windows Defender 0-day could allow attackers to fill hard disk
πŸ“… 09.07.2026 23:50
Google pays $250K for Linux vulnerability, allowing guest VM escapes
πŸ“… 09.07.2026 23:29
Show HN: Sighthound - open-source vulnerability scanner for source code
πŸ“… 09.07.2026 15:30
Vulnify: Giving Your Agents a CVE Brain
πŸ“… 09.07.2026 13:57
CVE-2026-14440: Cloudflare Universal SSL CAA records supersede user CAA
πŸ“… 09.07.2026 08:58
Google pays $250K for Linux vulnerability allowing guest VM escapes
πŸ“… 09.07.2026 07:05
New non-webkit, not-save userland exploit for Switch 1/2
πŸ“… 08.07.2026 17:54
HPCs taken offline due to a serious security vulnerability
πŸ“… 08.07.2026 16:45
Ubiquiti warns of new max severity UniFi OS vulnerability
πŸ“… 08.07.2026 16:13
Hacker Fantastic and team report a pre-auth remote root exploit against openwrt
πŸ“… 08.07.2026 15:33
OpenBSD has a use-after-free allowing local privilege escalation to root
πŸ“… 08.07.2026 13:24
Show HN: 0day Rubbish – AI-Discovered CVSS 9.8 RCE Chain in Cisco CUCM
πŸ“… 08.07.2026 09:04
Beyond Refusal: Aligned vs. Abliterated LLMs for Vulnerability Analysis
πŸ“… 08.07.2026 07:07
Show HN: 0day Rubbish – AI Vulnerability Discovery Platform (0day-Rubbish.com)
πŸ“… 08.07.2026 03:51
We won $92,337 bug bounty using a single kernel 0-day
πŸ“… 08.07.2026 01:37
Abusing the Sandbox for a Critical Cross-Tenant Vulnerability in Writer AI
πŸ“… 07.07.2026 18:10
Off By: Exploiting a Use-After-Free in the Linux Kernel
πŸ“… 07.07.2026 17:20
CVE-2026-8451: Citrix NetScaler SAML Memory Overread
πŸ“… 07.07.2026 08:20
Apple 'Hide My Email' Vulnerability Reveals Peoples' Real Email Addresses
πŸ“… 07.07.2026 02:16
Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)
πŸ“… 06.07.2026 18:44
Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]
πŸ“… 06.07.2026 17:35
Accusation, Trust, and the Future of Vulnerability Disclosure
πŸ“… 06.07.2026 17:15
EU startup built an AI system that matches Mythos on zero-day discovery
πŸ“… 06.07.2026 14:19
Bad Epoll (CVE-2026-46242)
πŸ“… 06.07.2026 09:34
Bad Epoll (CVE-2026-46242)
πŸ“… 05.07.2026 08:16
Exploiting LLM Agent Supply Chains via Payload-Less Skills
πŸ“… 04.07.2026 22:01
Protocol Prying: Vulnerability Research in AirDrop and Quick Share
πŸ“… 04.07.2026 20:38
Apple 'Hide My Email' Vulnerability Reveals Peoples' Real Email Addresses
πŸ“… 03.07.2026 22:56
AI Agent ransomware attack through Langflow instance by exploiting CVE-2025-3248
πŸ“… 03.07.2026 15:46
Cisco confirms attackers exploiting Unified CM flaw
πŸ“… 02.07.2026 16:59
Frame: Grounding LLM Vulnerability Detection with a Sound Separation-Logic Core
πŸ“… 02.07.2026 15:54
CISA: Microsoft SharePoint RCE flaw now actively exploited
πŸ“… 02.07.2026 15:24
Apple 'Hide My Email' Vulnerability Reveals Peoples' Real Email Addresses
πŸ“… 02.07.2026 03:47
GPUBreach: Privilege Escalation Attacks on GPUs Using Rowhammer
πŸ“… 01.07.2026 18:38
Exploiting Root Execution in Claude Cowork's Sandbox
πŸ“… 01.07.2026 17:37
Chasing the OPNsense RCE: The Story Behind My First CVEs
πŸ“… 01.07.2026 17:32
Apple 'Hide My Email' Vulnerability Reveals Peoples' Real Email Addresses
πŸ“… 01.07.2026 10:19
AI smart contract auditor paste Solidity, get a vulnerability report in seconds
πŸ“… 01.07.2026 02:07
22x memory amp DoS in Anthropic's buffa protobuf decoder (CVE-2026-55407)
πŸ“… 30.06.2026 22:36
CVE-2026-55200: libssh2 memory corruption with possible RCE
πŸ“… 30.06.2026 20:12
WordPress Vulnerability Scan Came Back Clean. Are You Still Exposed?
πŸ“… 30.06.2026 19:53
Who can take on web exploit scans? The Banhammerβ„’ can!
πŸ“… 30.06.2026 17:55
What Makes a Vulnerability Report Excellent
πŸ“… 30.06.2026 16:31
Do Excellent Vulnerability Reports
πŸ“… 30.06.2026 16:31
Group Note Draft: W3C Standards Vulnerability Disclosure and Handling Proces
πŸ“… 30.06.2026 16:27
Packet_edit_meme – a.k.a. CVE-2026-46331
πŸ“… 30.06.2026 16:17
Anonymous researcher drops 0-day 'exploitarium' repo
πŸ“… 30.06.2026 15:50
I found a vulnerability in an IRS authorized e-file vendor's app. What's next?
πŸ“… 30.06.2026 11:15
The Vulnerability Identity Crisis
πŸ“… 30.06.2026 09:42
A Simulated Attack Story on React Server Components to Exploit React2Shell
πŸ“… 29.06.2026 12:01
Do Excellent Vulnerability Reports
πŸ“… 29.06.2026 07:51
Agent Identity: Why Every Agent Vulnerability Is a Trust Boundary Failure
πŸ“… 28.06.2026 17:11
Build your own vulnerability harness
πŸ“… 28.06.2026 11:24
Show HN: DepGuard, Visualize and simulate NPM vulnerability blast radiuses
πŸ“… 28.06.2026 11:10
PixelSmash – Critical FFmpeg Vulnerability Turns Media Files into Weapons
πŸ“… 27.06.2026 14:59
Anonymous GitHub account mass-dropping undisclosed 0-days
πŸ“… 27.06.2026 14:31
Ukraine launches 40-day operation to push Russia to end the war
πŸ“… 27.06.2026 11:49
Linux Foundation and Others Launch Akrites Defend Open-Source from AI Exploits
πŸ“… 26.06.2026 21:01
Prompts in Manuscripts Exploit AI-Assisted Peer Review
πŸ“… 26.06.2026 16:11
Packet_edit_meme (CVE-2026-46331) page cache poisoning vulnerability
πŸ“… 26.06.2026 15:49
Show HN: Image-inspector – find base images, see CVE counts, pin by digest
πŸ“… 26.06.2026 14:48
Incident CVE-2026-LGTM
πŸ“… 26.06.2026 12:58
Linux Foundation Launches Akrites to Defend FOSS from AI-Enabled Exploits
πŸ“… 26.06.2026 00:33
Hidden Prompts in Manuscripts Exploit AI-Assisted Peer Review
πŸ“… 25.06.2026 22:05
A CVE Dispute
πŸ“… 25.06.2026 17:42
PixelSmash – Critical FFmpeg Vulnerability
πŸ“… 25.06.2026 17:23
Aisle Discovers 6 New CVEs in Curl, Including the Oldest Issue Ever Reported
πŸ“… 25.06.2026 08:07
A CVE Dispute
πŸ“… 24.06.2026 23:09
Introduction to the DOM for Vulnerability Researchers
πŸ“… 24.06.2026 22:56
Same flaw, opposite verdict: what counts as a vulnerability in AI agents?
πŸ“… 24.06.2026 21:53
Exploiting vulnerabilities in Johnson and Johnson web apps
πŸ“… 24.06.2026 16:33
How Bod 26-04 Is Coming for Your Vulnerability Management Program
πŸ“… 24.06.2026 13:30
18 CVEs fixed in Curl 8.21.0
πŸ“… 24.06.2026 09:13
Same-Day Shells: A Full-Chain RCE Sweep Against Cisco CUCM (CVE-2026-20230)
πŸ“… 24.06.2026 06:57
Vulnerability Reports are not Special Anymore
πŸ“… 23.06.2026 23:42
The Exploit Doesn't Exist. You Can Still Prove It Works Against You
πŸ“… 23.06.2026 17:01
Vulnerability Reports Are Not Special Anymore
πŸ“… 23.06.2026 15:07
PixelSmash – Critical FFmpeg Vulnerability Turns Media Files into Weapons
πŸ“… 23.06.2026 13:16
Show HN: SindriKit – A C framework applying dependency injection to exploit dev
πŸ“… 22.06.2026 12:15
Ethereum's biggest 'sandwich' bot drained of $7.5M in ironic exploit
πŸ“… 21.06.2026 09:23
White House delays US voting-machine vulnerability report
πŸ“… 21.06.2026 01:29
Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
πŸ“… 20.06.2026 11:04
Rethinking vulnerability management in the age of AI and CI/CD
πŸ“… 20.06.2026 10:25
I Was Too Stoned to Configure Nginx Auth and Now My 0Days Are Touring the World
πŸ“… 20.06.2026 10:25
Researchers drop checkm8-style BootROM exploit for A12 and A13 iPhones
πŸ“… 20.06.2026 02:45
Critical BootROM Vulnerability Exposes Apple Devices to Unpatchable Exploits
πŸ“… 19.06.2026 13:05
Tethered Bootrom Exploit for Apple A12, S4/S5 and A13 SoCs
πŸ“… 19.06.2026 12:06
Squidbleed (CVE-2026-47729) Heartbleeds ancient cousin, hiding in Squid since 97
πŸ“… 19.06.2026 10:34
Build your own vulnerability harness
πŸ“… 19.06.2026 08:45
RemotePower – self-hosted fleet monitoring with built-in vulnerability scanning
πŸ“… 19.06.2026 08:08
Usbliter8 an A12/A13 SecureROM Exploit
πŸ“… 19.06.2026 08:00
Apple A12 and A13 Chips: New Unpatchable Exploit
πŸ“… 19.06.2026 05:58
CVE Daily, RSS Feed Generation Back End
πŸ“… 19.06.2026 05:20
Every Privacy Vulnerability in Chrome and How to Catch It
πŸ“… 19.06.2026 04:04
Usbliter8 – An A12/A13 SecureROM Exploit
πŸ“… 18.06.2026 22:39
Unpatchable Apple Bootrom Exploit for Devices Released 2018-2021
πŸ“… 18.06.2026 21:06
Squidbleed (CVE-2026-47729)
πŸ“… 18.06.2026 19:38
Gig workers are endlessly exploited. AI could make more of us share their fate
πŸ“… 18.06.2026 19:16
AICU – LLM Red Team Vulnerability Scanner
πŸ“… 18.06.2026 18:06
Apple's A12 and A13 Chips Facing New Unpatchable Exploit
πŸ“… 18.06.2026 16:57
Usbliter8 an A12/A13 SecureROM Exploit
πŸ“… 18.06.2026 14:23
Exploiting GPU Tensor Cores from Java Using Babylon
πŸ“… 18.06.2026 13:44
CVE-2026-42530 – Nginx HTTP3/QUIC Use-After-Free
πŸ“… 18.06.2026 13:04
Chimera: Turn a rooted Android into a hardware exploit platform
πŸ“… 18.06.2026 10:17
Vulnerability Disclosure: Stealing Emails via Firefox's AI Features
πŸ“… 18.06.2026 04:38
CVE-2026-23111: exploiting and detecting a nftables UAF born from a security fix
πŸ“… 18.06.2026 01:24
CVE-2026-42530: Nginx 1.30.2 and Nginx 1.31.2
πŸ“… 17.06.2026 16:56
Zero-Day 'RoguePlanet' in Microsoft Defender Grants System-Level Control
πŸ“… 17.06.2026 16:00
Introduction to the DOM for Vulnerability Researchers
πŸ“… 17.06.2026 13:46
My Blog Post Is the Exploit: Each new model changes the math
πŸ“… 17.06.2026 13:05
AIs on their own found ways to exploit regulations and evade current safeguards
πŸ“… 17.06.2026 11:03
Most of the CVE-2026-4020 attackers are the same client
πŸ“… 17.06.2026 08:47
Critical Copilot vulnerability allowed hackers to steal 2FA code from users
πŸ“… 16.06.2026 13:37
Vulnerability Forecast Update: Navigating the AI Epoch
πŸ“… 16.06.2026 06:57
Cisco SD-WAN Manager arbitrary file write (CVE-2026-20262) – CISA KEV
πŸ“… 15.06.2026 21:41
FreeBSD AI-Assisted Vulnerability Discovery Project Launch
πŸ“… 15.06.2026 21:22
ShinyHunters hacked 100 orgs by exploiting an Oracle PeopleSoft 0-day
πŸ“… 15.06.2026 19:10
Linux Kernel vulnerability research toolkit
πŸ“… 15.06.2026 18:55
Memory safety CVEs differ between Rust and C/C++
πŸ“… 15.06.2026 16:11
GPT-5 Nano Vulnerability test results you should know before deploying
πŸ“… 15.06.2026 16:01
Show HN: Exploiting Slack's video embeds to achieve E2EE communication
πŸ“… 15.06.2026 15:43
Libexpat will not accept vulnerability reports before 2026-08-01
πŸ“… 15.06.2026 14:49
Atom Exhaustion Is Not a Footgun. It's One Third of Our CVEs
πŸ“… 15.06.2026 12:15
Curl will not accept vulnerability reports during July 2026
πŸ“… 15.06.2026 06:02
Measuring LLMs' impact on N-day exploits
πŸ“… 14.06.2026 15:24
PeopleSoft 0-day affecting organizations steals gigabytes of data
πŸ“… 14.06.2026 04:14
Visa Vulnerability Agentic Harness (built with Mythos)
πŸ“… 13.06.2026 21:43
PeopleSoft 0-day affecting organizations steals gigabytes of data
πŸ“… 13.06.2026 14:01
Twenty One Zero-Days in FFmpeg
πŸ“… 12.06.2026 22:13
PeopleSoft 0-day affecting organizations steals gigabytes of data
πŸ“… 12.06.2026 21:37
Measuring LLMs' impact on N-day exploits
πŸ“… 12.06.2026 18:52
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
πŸ“… 12.06.2026 18:05
Patriot missile shortage created 'window of vulnerability' Russia is exploiting
πŸ“… 12.06.2026 17:20
Joint Guidance on Vulnerability Naming and Disclosure
πŸ“… 12.06.2026 15:43
ITScape (CVE-2026-46316): KVM/ARM64 VM escape
πŸ“… 12.06.2026 12:54
ShinyHunters hacked 100 orgs by exploiting an Oracle PeopleSoft 0-day
πŸ“… 12.06.2026 01:23
Ivanti Sentry pre-auth RCE (CVE-2026-10520) – CVSS 10.0, public PoC, CISA KEV
πŸ“… 11.06.2026 19:38
ITScape: Guest-to-Host Escape in KVM/ARM64 (CVE-2026-46316)
πŸ“… 11.06.2026 19:27
Nightmare Eclipse drops 'RoguePlanet' zero-day granting SYSTEM privileges
πŸ“… 11.06.2026 18:51
Microsoft's worst 'Nightmare' unleashes BitLocker bypass 0-day
πŸ“… 11.06.2026 18:35
Visa Vulnerability Agentic Harness for Project Glasswing
πŸ“… 11.06.2026 16:49
CISA tells govt agencies to patch critical exploited flaws in 3 days
πŸ“… 11.06.2026 16:32
Linux Sees Patches for "Critical" Vulnerability Affecting Many Arm CPUs
πŸ“… 11.06.2026 14:47
Critical auth bypass vulnerability in phpBB
πŸ“… 11.06.2026 12:36
Angry bug hunter with Microsoft beef drops new Windows 0-day
πŸ“… 11.06.2026 10:30
The vulnerability bottleneck has moved
πŸ“… 11.06.2026 08:25
Are insecure code completions in PyCharm a vulnerability?
πŸ“… 11.06.2026 01:26
Patch for critical vulnerability in p2pool (Monero) to be released on 2026-06-13
πŸ“… 10.06.2026 22:16
Splunk Enterprise PostgreSQL sidecar has no auth (CVE-2026-20253, CVSS 9.8)
πŸ“… 10.06.2026 19:39
Are insecure code completions a vulnerability?
πŸ“… 10.06.2026 17:03
What We Learned from a Multi-Service Vulnerability Disclosure
πŸ“… 10.06.2026 15:17
High severity Chrome CVE-2026-11645
πŸ“… 10.06.2026 14:29
Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed
πŸ“… 10.06.2026 14:05
Measuring LLMs' impact on N-day exploits
πŸ“… 10.06.2026 11:40
High-severity vulnerability in Linux caused by a single faulty character
πŸ“… 10.06.2026 11:04
Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)
πŸ“… 10.06.2026 09:28
Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges
πŸ“… 10.06.2026 00:25
Microsoft patches 0-day disclosed by researcher it feuded with
πŸ“… 09.06.2026 23:49
RoguePlanet: Windows 0-day privilege escalation
πŸ“… 09.06.2026 23:34
The contract that could get you FIRED (lexploit)
πŸ“… 09.06.2026 21:27
Off By: Exploiting a Use-After-Free in the Linux Kernel
πŸ“… 09.06.2026 20:14
BlackSun: Defender for macOS quarantine restore TOCTOU (CVE-2026-45647)
πŸ“… 09.06.2026 17:14
Show HN: AI-native red-team for penetration testing and vulnerability research
πŸ“… 09.06.2026 16:00
Google patches new Chrome zero-day flaw exploited in the wild
πŸ“… 09.06.2026 15:34
Ransomware crims got month head start on Check Point VPN 0-day that now has fix
πŸ“… 09.06.2026 14:33
Unpatched Firefox focus universal XSS 0day poc released
πŸ“… 09.06.2026 06:36
Vulnerability and malware checks in UV: uv audit, malware check in uv add, sync
πŸ“… 09.06.2026 05:11
Microsoft says it will not pursue security researchers after zero-day backlash
πŸ“… 09.06.2026 03:08
Attackers had month-long head start on patched Check Point VPN zero-day
πŸ“… 09.06.2026 01:24
Anthropic: Measuring LLMs' impact on N-day exploits
πŸ“… 08.06.2026 18:52
Vulnerability and Malware Checks in Uv
πŸ“… 08.06.2026 15:33
Show HN: GitHub Copilot port of Anthropic's AI vulnerability discovery harness
πŸ“… 08.06.2026 14:05
last30days-skill
πŸ“… 08.06.2026 01:17
The Illusion of Invulnerability in Cybersecurity
πŸ“… 07.06.2026 19:28
Interactive explorer for cybersecurity vulnerability trends
πŸ“… 06.06.2026 17:48
Inspector general finds NIST mistakes made vulnerability database ineffective
πŸ“… 06.06.2026 15:14
How to Not Let Them Get Away with It: The Mathematics of Infinite Exploitation
πŸ“… 06.06.2026 12:58
Yet another Cisco SD-WAN 0-day under attack, and no patch in sight
πŸ“… 06.06.2026 03:27
Exploiting ML-DSA bugs [pdf]
πŸ“… 06.06.2026 00:49
Watch crypto protocols exploited in real time
πŸ“… 05.06.2026 15:11
Researcher uses Opus 4.8 to find critical counterfeiting vulnerability in Zcash
πŸ“… 05.06.2026 10:56
Protecting against HTTP/2 Bomb vulnerability (CVE-2026-49975) with HAProxy
πŸ“… 05.06.2026 10:14
The Orchard Counterfeiting Vulnerability
πŸ“… 05.06.2026 07:35
ZEC drops 30% after Anthropic AI finds Zcash counterfeit vulnerability
πŸ“… 05.06.2026 06:52
Anthropic's open-source framework for AI-powered vulnerability discovery
πŸ“… 04.06.2026 20:11
CIFSswitch – local privilege escalation vulnerability
πŸ“… 04.06.2026 13:30
Another bug hunter leaks Microsoft exploits [due to vuln. disclosure issues]
πŸ“… 04.06.2026 12:59
Zorv-Self-hosted autonomous AI that fixes CVEs
πŸ“… 04.06.2026 11:38
Forge: Multi-Agent Graduated Exploitation and Detection Engineering
πŸ“… 04.06.2026 05:30
Zcash Executes Emergency Fork After Critical Orchard Vulnerability Discovery
πŸ“… 03.06.2026 19:04
Anthropic's coordinated vulnerability disclosure dashboard
πŸ“… 03.06.2026 18:36
Acer working to patch max severity zero-days in Wave 7 routers
πŸ“… 03.06.2026 13:46
The newest Instagram "exploit" is the goofiest I've seen
πŸ“… 02.06.2026 17:37
AI Vulnerability Intelligence Agent Converts CVEs to Actionable Security Reports
πŸ“… 02.06.2026 17:27
Microsoft reaches for olive branch after public dustup with 0-day researcher
πŸ“… 02.06.2026 16:55
CISA flags two-year-old Oracle flaw as actively exploited in attacks
πŸ“… 02.06.2026 13:15
CIFSwitch: A non-universal Linux local root vulnerability
πŸ“… 02.06.2026 07:28
CVE-2026-31525: Linux Kernel Privilege Escalation Flaw
πŸ“… 02.06.2026 02:39
CVE-2026-41089
πŸ“… 01.06.2026 20:12
Palo Alto VPN bug graduates from advisory to active exploitation
πŸ“… 01.06.2026 19:33
The newest Instagram "exploit" is the goofiest I've seen
πŸ“… 01.06.2026 16:31
Critical Windows Netlogon RCE flaw now exploited in attacks
πŸ“… 01.06.2026 15:06
Tell HN: Exploit mimicking Cloudflare's verify human page
πŸ“… 01.06.2026 15:03
Microsoft says it will not pursue security researchers after zero-day backlash
πŸ“… 01.06.2026 12:54
Instagram exploit allows you to use Meta AI to reset passwords to accounts
πŸ“… 01.06.2026 03:21
Instagram account takeover exploit via support chatbot prompt injection (fixed)
πŸ“… 01.06.2026 02:43
Show HN: Orchid Mantis – A PoC in Rust for Zero Knowledge Proofs of Exploit
πŸ“… 31.05.2026 21:27
Atom Exhaustion Is Not a Footgun. It's One Third of Our CVEs
πŸ“… 27.05.2026 20:15
The bug bounty market is bifurcating: notes from finding 7 CVEs for $96
πŸ“… 27.05.2026 18:38
Multi-Agent LLM System for Automated Vulnerability Discovery and Reproduction
πŸ“… 27.05.2026 17:42
AI agents imperiled by critical vulnerability in open source package
πŸ“… 27.05.2026 16:16
LiteSpeed CPanel Plugin with Root Privilege Escalation Under Active Exploitation
πŸ“… 27.05.2026 12:55
DeepSWE crowns GPT-5.5, and finds Claude Opus exploiting a benchmark loophole
πŸ“… 27.05.2026 12:44
GitHub bans researcher for exploits; expert calls it vindictive
πŸ“… 27.05.2026 12:14
Anthropic's coordinated vulnerability disclosure dashboard
πŸ“… 27.05.2026 11:18
Vigolium: Open-Source Vulnerability Scanner
πŸ“… 27.05.2026 05:57
AI agents imperiled by critical vulnerability in open source package
πŸ“… 26.05.2026 21:34
Disclosing the Badhost Vulnerability in Starlette
πŸ“… 26.05.2026 20:43
CISA orders feds to patch actively exploited Drupal vulnerability
πŸ“… 26.05.2026 15:37
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
πŸ“… 26.05.2026 14:32
BadHost – CVE-2026-48710 Starlette Host-Header Auth Bypass
πŸ“… 26.05.2026 09:07
OWASP CVE Lite CLI
πŸ“… 26.05.2026 08:16
Art-Template NPM Coruna Browser Exploit Compromise
πŸ“… 26.05.2026 01:30
CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude
πŸ“… 25.05.2026 23:40
Login bypass vulnerability in Polish Social Insurance, Court, and Health systems
πŸ“… 25.05.2026 21:12
Security Advisory for Cargo (CVE-2026-5222)
πŸ“… 25.05.2026 20:08
Vulnerability report written by AI hacker agent
πŸ“… 25.05.2026 13:59
Composer-cve-gate – pre-install gate for Composer, built after Laravel-Lang
πŸ“… 25.05.2026 09:34
Vulnerability Spoiler Alert – Exposing Patches Before CVEs
πŸ“… 25.05.2026 05:49
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
πŸ“… 25.05.2026 01:32
Measuring LLMs' ability to develop exploits
πŸ“… 24.05.2026 18:52
Local Root Privilege Escalation and Credential Disclosure in the Linux Kernel
πŸ“… 24.05.2026 07:39
Anthropic's coordinated vulnerability disclosure dashboard
πŸ“… 23.05.2026 18:31
CVE-2026-9256: Nginx 1.31.1 and 1.30.1
πŸ“… 22.05.2026 23:42
Anthropic's coordinated vulnerability disclosure dashboard
πŸ“… 22.05.2026 22:08
Measuring LLMs' ability to develop exploits
πŸ“… 22.05.2026 21:27
Supply chain attacks don't wait for CVEs
πŸ“… 22.05.2026 15:37
POC for CVE-2026-46529 – RCE via PDF argv injection
πŸ“… 22.05.2026 06:45
PopPy: Opportunistically Exploiting Parallelism in Python Compound AI Apps
πŸ“… 22.05.2026 05:27
AI Slop and the Vulnerability Treadmill
πŸ“… 22.05.2026 01:41
Nginx-poolsip: new RCE 0-day and ASLR bypass in mainline Nginx
πŸ“… 22.05.2026 00:35
CVE-2026-28910: Breaking macOS App Sandbox Data Containers and Hijacking Apps
πŸ“… 21.05.2026 23:49
Chromium publishes fixed exploit 4 years later, turns out it's unfixed
πŸ“… 21.05.2026 20:45
Bitcoin Value Overflow Incident (CVE-2010-5139)
πŸ“… 21.05.2026 19:11
CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox
πŸ“… 21.05.2026 15:58
Microsoft warns of new Defender zero-days exploited in attacks
πŸ“… 21.05.2026 15:01
Golang gRPC – CVE-2026-33186 Detail
πŸ“… 21.05.2026 14:46
FatGid: FreeBSD 14.x kernel local privilege escalation
πŸ“… 21.05.2026 12:15
Show HN: A timeline of recent open source CVE intensity and volume
πŸ“… 21.05.2026 11:35
Google published exploit code for an unfixed Chromium bug
πŸ“… 20.05.2026 20:22
Anthropic Claude Code sandbox bypass allows second data exfiltration exploit
πŸ“… 20.05.2026 17:36
The may 2026 fedi software vulnerability
πŸ“… 20.05.2026 17:17
Exploit released for new PinTheft Arch Linux root escalation flaw
πŸ“… 20.05.2026 16:52
Huawei zero-day attack behind last years crash of Luxembourgs telecoms network
πŸ“… 20.05.2026 14:24
An image could compromise your Mac: understanding an ExifTool vulnerability
πŸ“… 20.05.2026 13:43
CVE-2025-54518
πŸ“… 20.05.2026 01:57
20 Year old pgcrypto CVE reported
πŸ“… 20.05.2026 01:50
Year-Old PHP Vulnerability Is One of the Most Targeted Vulnerabilities
πŸ“… 19.05.2026 17:20
Microsoft rejects critical Azure vulnerability report, no CVE issued
πŸ“… 19.05.2026 05:15
The Explore-Exploit Dilemma in Media Consumption (2016)
πŸ“… 19.05.2026 03:35
War game exposed U.S. vulnerability to low-tech warfare
πŸ“… 19.05.2026 02:25
New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released
πŸ“… 18.05.2026 18:56
Signs That AI-Assisted Vulnerability Discovery Is Reshaping Disclosure Volumes
πŸ“… 18.05.2026 17:22
MS Silently Patched a CVSS 9.9 Privilege Escalation in Azure Backup for AKS
πŸ“… 18.05.2026 14:59
Ansede-static: offline SAST, 98.8% CVE recall, catches IDOR and auth bypass
πŸ“… 18.05.2026 08:43
I built an AI vulnerability scanner with Claude and Codex. It failed
πŸ“… 18.05.2026 06:22
Microsoft warns of Exchange zero-day flaw exploited in attacks
πŸ“… 17.05.2026 19:27
Before it gets a number – About CVE, CWE and vulnerabilities prevention
πŸ“… 17.05.2026 13:47
Security researcher says Microsoft built a Bitlocker backdoor, releases exploit
πŸ“… 17.05.2026 13:42
Microsoft rejects critical Azure vulnerability report, no CVE issued
πŸ“… 17.05.2026 10:48
Recent Kernel exploits, attack surface reduction, example IPSEC
πŸ“… 17.05.2026 09:12
Linux Latest Vulnerability Allows Reading Root-Owned Files by Unprivileged Users
πŸ“… 17.05.2026 06:08
Irst Apple M5 memory exploit discovered using Anthropic AI
πŸ“… 16.05.2026 22:08
Vulnerability Cve-2026-7412
πŸ“… 16.05.2026 20:48
Vulnerability Cve-2026-7411
πŸ“… 16.05.2026 20:47
Microsoft Exchange Server Spoofing Vulnerability New
πŸ“… 16.05.2026 20:09
Microsoft Exchange: Zero-day vulnerability is being attacked
πŸ“… 16.05.2026 20:09
Show HN: Orchid Mantis – PoC Zero Knowledge Proof of Exploit (ZKPoX) Framework
πŸ“… 16.05.2026 08:17
CVE-2026-40369 – Windows Kernel Elevation of Privilege Vulnerability
πŸ“… 16.05.2026 03:25
Thorchain halts trading after $10M cross-chain exploitRUNE token drops 12%
πŸ“… 16.05.2026 01:04
ExploitGym: Can AI agents turn bugs into exploits?
πŸ“… 15.05.2026 23:41
CVE-2026-46333 (SSH-keysign-pwn)
πŸ“… 15.05.2026 22:11
The Apple macOS Security Update Review (3 macOS Versions; 82 Unique CVEs)
πŸ“… 15.05.2026 19:49
THORChain exploit hits Bitcoin, Ethereum, and BSC: Hackers steal over $10M
πŸ“… 15.05.2026 19:11
Show HN: Check for CVE-2026-31431 (copy.fail) without overwriting su
πŸ“… 15.05.2026 17:21
Exploitbench
πŸ“… 15.05.2026 16:17
QEMUtiny - QEMU escape vulnerability if cxl is used
πŸ“… 15.05.2026 14:38
A 0-click exploit chain for the Pixel 10
πŸ“… 15.05.2026 13:39
Microsoft warns of Exchange zero-day flaw exploited in attacks
πŸ“… 15.05.2026 13:02
Linux's Latest Vulnerability Allows Reading Root-Owned Files by Unpriv Users
πŸ“… 15.05.2026 12:00
The Biggest Exploit in Trackmania History [video]
πŸ“… 15.05.2026 09:22
Another Linux Kernel exploit – fragnesia
πŸ“… 15.05.2026 09:05
AI, open code and vulnerability risk in the public sector
πŸ“… 15.05.2026 08:54
Zero-day exploit defeats default Windows 11 BitLocker protections
πŸ“… 15.05.2026 07:16
Jelly Tide: My Honest 30-Day Results (Shocking Before and After)
πŸ“… 15.05.2026 07:08
Make It Blink: Over-the-Air Exploitation of the Philips Hue Bridge
πŸ“… 15.05.2026 06:37
Windows BitLocker zero-day gives access to protected drives, PoC released
πŸ“… 14.05.2026 23:37
Zero-day exploit defeats default Windows 11 BitLocker protections
πŸ“… 14.05.2026 22:20
Postgres minor releases closing 11 CVEs
πŸ“… 14.05.2026 19:26
First public macOS kernel memory corruption exploit on Apple M5
πŸ“… 14.05.2026 18:25
AI, open code and vulnerability risk in the public sector (UK)
πŸ“… 14.05.2026 17:35
New Nginx Exploit
πŸ“… 14.05.2026 17:17
Google says it disrupted an AI-driven effort to exploit a software bug
πŸ“… 14.05.2026 17:09