TL;DR Splunk patched a critical OS command injection flaw in its AI Toolkit, tracked as CVE-2026-20266. The bug scores 9.1 and lets an admin-role user run arbitrary commands on the host. Splunk al…

TL;DR Cisco released hardening updates for Secure Workload on August 19, 2026. The Cisco Secure Workload authentication bypass and privilege escalation flaws include two vulnerabilities rated CVSS…

I didn’t start bug bounty because I knew exactly what I was doing.

By R4yz0x

Hardware does not want to talk to you. That is the whole point.

Ransomware attackers disrupted the engineering systems of Manitoba’s largest hospital, in the Canadian province. Following a cyberattack at the Health Sciences Centre in Winnipeg, problems e…

TL;DR Splunk fixed 17 vulnerabilities across its apps and add-ons on August 19, 2026. The worst, CVE-2026-76404, is a critical remote code execution flaw in the MCP Server app. It scores 9.1. Splu…

Google announced today that it is giving all eligible college students in the United States a full year of Google AI Pro at no cost. The service, which normally costs $19.99 per month, includes fo…

This week, numerous users discovered that executing quick or full scans with Microsoft Defender resulted in inexplicable failures, or upon launching the application, they were immediately greeted …

No exploit chain. No auth bypass. Just an 800,000-character comment box nobody thought to check.

30-Second Version: A near-blank report got CVSS 10, a fix inside 24 hours, and a $25,000 bounty. The impact section was one word: “SSRF.”…

Between June 17 and July 22, 2026, a single threat actor compromised more than 14,530 Dahua IP cameras in what researchers have designated…

Researchers have demonstrated that certain ideas and goals can propagate between AI agents. The result is interesting, unusual, and worth…

Objetivo: Investigar a “ACME Jet Solutions” e os arquivos disponibilizados em busca de informações/dados relevantes (i.e. Flags) para…

The nature of cyber threats is constantly evolving and annual penetration testing does not provide sufficient security anymore. More and…

5 free hands-on TryHackMe investigations to help build your open-source intelligence skills. Save this for when you want to practice OSINT.

CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.

A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.