TantoSec turned an unauthenticated AES-CBC padding oracle in Telerik UI for ASP.NET AJAX into remote code execution, chaining a decrypt-versus-parse oracle, a predictable HMAC key, and a type-name deserialisation gadget.

Pulling the firmware off the flash chip, decompressing the kernel, and finding an undocumented root login the owner cannot change.

As AI agents are deployed to automate more tasks, they become more capable. And as the famous quote goes: "With great power comes great responsibility." Assuming that humans in the loop can mitigate t...

Apply for the open Trust Me Im The System Arango Db Bugs Secure System Architecture position at Remedio. View complete job responsibilities, requirements, and submit your application online today.

A single exposed directory held the full toolkit behind a Redis cryptomining botnet. We parsed the operator's own campaign logs to confirm 3,562 compromised servers and map their tradecraft.

The first zero-click worm to spread through WeChat calls across iOS and Android.

The Windows Security Center collects and presents information about the status of the antivirus control (Windows Defender or 3rd party). When a third-party antivirus is installed, Windows Defender …

The FortiPAM Chrome extension (1M+ users), used for Privileged Access Management, let any site set the browser's proxy for the session, open a new tab and stream screen recordings of it to an attacker's server. CVSS 9.1. CVE-2026-84388.

A measured investigation into MPEG-TS segments served under .woff2 URLs, cached at Cloudflare, and reproduced across two delivery paths.

Security research uncovers an integer underflow in Apple's mach_o Archive parser causing OOB reads, DoS, and information disclosure in tools

Bug bounty initiatives can be a useful tool for companies to source security research focused on their products and get ahead of attackers. From a security researcher’s perspective, it’s a great way to gain experience and contribute to the overall security…

An operator weaponized CVE-2026-15409 two days after disclosure, extracting LDAP credentials and running DCSync against Active Directory via SonicWall appliances.

A novel technique for writing ELF shared objects and achieving code execution in Python, Ruby, and Node.js using the sqlite_dbpage virtual table.

An untrusted repository opened in Claude Code can escape the macOS sandbox and run commands on your computer as your privileged user. You never get the permission prompt.

Learn how to hack APIs in 2026. This updated guide covers BOLA/IDOR, GraphQL flaws, OAuth misconfigurations, race conditions, and AI-backed API vulnerabilities.

A real Carnival booking confirmation passed SPF, DKIM and DMARC while one link served customers malware. The lapsed domain behind it, and what it delivered.

Networks ranked by how much they probe the internet relative to the address space they announce. Live from open honeypot telemetry.

A Zero Trust microsegmentation guide, with special consideration for agentic AI security & hybrid IT and OT security. Implement lateral movement prevention.