How a critical Visual Studio Code vulnerability allows unverified extensions to run automatically, and learn how to secure your workstation.

PhantomFix (CVE-2026-90999) is a critical vulnerability in Sentry Seer's autonomous autofix: a fabricated error report sent to a public DSN can reach the coding agent and lead to code execution and access to connected repositories. It's a concrete instance…

10 Lessons From an Invisible Conflict

There is no need to update symmetric key sizes as part of the post-quantum transition, due to the details of how Grover's algorithm scales. Most authorities agree.

A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories

Squeezing four more LPEs out of Linux with agentic vuln hunting: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, and CVE-2026-74469

Teams allows chat from any external domain by default. Lab replication: first message to full endpoint control in 21 minutes. Here is what to change.

We reported a sandbox escape in Docker's hypervisor for Mac: a container gets complete read and write access to the host filesystem with three lines of bash. Assigned CVE-2026-77179 and fixed in Docker Desktop 4.88.0 and Docker Sandboxes 0.42.0.

Researchers found malicious behavior in LLM routers, revealing new risks for AI agents, tool calls, credentials, and the LLM supply chain.

BragJack attack (discovered by Forever Security) allowed ordinary extensions to hijack the internal browser agent of Comet, Chrome, Edge, Opera, and Claude in Chrome

Search and explore cloud infrastructure vulnerabilities with real-time severity filtering and CVSS scoring.

AI agents are being handed real power faster than they can be secured, and attackers are turning their own tools against them.

PcapSplitter reported 48 packets, wrote 44, exited zero. Tracing a filename collision on TCP 5-tuple reuse, and the fix merged upstream.

I found three serious bugs in Godot 4.7 in an audit conducted with an LLM agent. The bugs are due to missing bounds checking in code that reads untrusted files. Using files that are deliberately...

OpenAI's ad collector at bzr.openai.com sets a cookie called __obi, scoped to .openai.com. The value is while you are on ChatGPT and tied to your ChatGPT account. __obi is then sent to OpenAI from ordinary websites you visit.

Any company that buys ads on…

Technical writeup on ZTE SmartLife security findings covering app-auth recovery, account enumeration, password reset behavior, signup abuse, and Homecare SDK reach.

The Windows Error Reporting Dump Encoding Library (WerEnc.dll) is a Microsoft signed DLL that can be abused by threat actors to encrypt their implant using a trusted Microsoft cryptographic impleme…

This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in...

BambooToken turns an MQTT broker into a remote-control hub for Linux. Behind a 59-byte configuration blob, hex-encoded topics, and repeating XOR lies a backdoor built...

Why static linters miss multi-stage lateral movement, how autonomous LLMs navigate graph-based escalation, and defensive strategies for AI infrastructure.