Zen and the Art of Microcode Hacking https://bughunters.google.com/blog/zen-and-the-art-of-microcode-hacking
Google
Blog: Zen and the Art of Microcode Hacking
This blog post covers the full details of EntrySign, the AMD Zen microcode signature validation vulnerability recently discovered by the Google Security team.
Digital Forensics: Basic Linux Analysis After Data Exfiltration https://hackers-arise.com/digital-forensics-basic-linux-analysis-after-data-exfiltration/
Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858) #Ni8mare #n8n #RCE #CVE202621858 #Vulnerability https://www.cyera.com/research/ni8mare-unauthenticated-remote-code-execution-in-n8n-cve-2026-21858
Cyera
Ni8mare - Unauthenticated Remote Code Execution in n8n (CVE-2026-21858)
Cyera Research Labs has discovered a "worst-case scenario" flaw in n8n, the industry-leading platform for AI and workflow automation. Dubbed "Ni8mare," this vulnerability (CVE-2026-21858) allows an unauthenticated remote attacker to gain full administrative…
CVE-2026-21876: Critical Multipart Charset Bypass Fixed in CRS 4.22.0 and 3.3.8 https://coreruleset.org/20260106/cve-2026-21876-critical-multipart-charset-bypass-fixed-in-crs-4.22.0-and-3.3.8/
CRS Project
CVE-2026-21876: Critical Multipart Charset Bypass Fixed in CRS 4.22.0 and 3.3.8
OWASP CRS addresses a critical charset validation bypass in rule 922110 affecting all supported versions. The vulnerability allowed UTF-7 and other charset-based attacks to evade detection through a chained rule processing flaw.
WhatsApp Signal Privacy Vulnerability: Silent Tracking Attack Exposed (2026) #WhatsAppSignal #PrivacyVulnerability #SilentTracking #MetadataLeak #DeviceProfiling https://baizaar.tools/whatsapp-signal-privacy-vulnerability-attack-2026/
BAIZAAR
WhatsApp Signal Privacy Vulnerability: Silent Tracking Attack Exposed (2026) - BAIZAAR
Critical WhatsApp Signal privacy vulnerability exposed. Attackers track activity via delivery receipts. Learn protection steps for this 2026 timing attack.
Do you remember "The Conscience of a Hacker"? It's been 40+ years now... we're definitely getting old (but luckily so!) :( https://phrack.org/issues/7/3
Phrack
Hacker's Manifesto
Click to read the article on phrack
Malware Analysis, Phishing, and Email Scams #TechSupportScam #BrowserDeception #FakeWindowsUpdate #SimulatedBSOD #PsychologicalTrap https://malwr-analysis.com/2026/01/09/fake-windows-update-and-bsod-alerts-used-in-a-tech-support-scam/
Malware Analysis, Phishing, and Email Scams
Fake Windows Update and BSOD Alerts Used in a Tech Support Scam
Overview While reviewing submissions received through the WordPress feedback form on my website, I came across a URL that initially appeared unremarkable. Such submissions are common and often cont…
[Research] LLVM based VMProtect Devirtualization: Part 1 (EN) #VMProtectDevirtualization #LLVMAnalysis #CodeObfuscation #DynamicTracing #SymbolicExecution https://hackyboiz.github.io/2025/09/11/banda/LLVM_based_VMP/en/
[Research] VMProtect Devirtualization: Part 2 (EN) #VMProtectDevirtualization #LLVMAnalysis #CodeObfuscation #DynamicTracing #SymbolicExecution https://hackyboiz.github.io/2025/12/11/banda/VMPpart2/en/
CVE-2025-6554: The (rabbit)
Hole #CVE20256554 #V8Exploit #TheHoleLeak #TDZBypass #TypeConfusion https://retr0.zip/blog/cve-2025-6554-the-rabbit-hole.html
Hole #CVE20256554 #V8Exploit #TheHoleLeak #TDZBypass #TypeConfusion https://retr0.zip/blog/cve-2025-6554-the-rabbit-hole.html
Gixy-Next: NGINX Configuration Security Scanner for Security Audits #NginxSecurity #ConfigScanner #VulnDetection #HardeningTool #GixyNext https://gixy.io/
Gixy-Next
Gixy-Next: NGINX Security Scanner & Configuration Hardening
Gixy-Next is an open source static analyzer for NGINX configurations. It detects security vulnerabilities, unsafe directives, compliance issues, and performance misconfigurations in nginx.conf before deployment.
WTF Are Abliterated Models? Uncensored LLMs Explained https://webdecoy.com/blog/wtf-are-abliterated-models-uncensored-llms-explained/
WebDecoy
WTF Are Abliterated Models? Uncensored LLMs Explained - WebDecoy
What abliterated means in AI models: how abliteration removes the refusal direction from LLMs, why it matters for security, and which models are abliterated.
Grok’s image edits spark sexualised deepfakes and regulator probes worldwide https://thebias.co.uk/articles/grok_ai_deepfake_outrage
Cybersecurity AI: A Game-Theoretic AI for Guiding Attack and Defense #CybersecurityAI #GameTheory #AIAttack #AIDefense #SecurityStrategy https://arxiv.org/pdf/2601.05887
CVE-2025-64155: Three Years of Remotely Rooting the Fortinet FortiSIEM https://horizon3.ai/attack-research/disclosures/cve-2025-64155-three-years-of-remotely-rooting-the-fortinet-fortisiem/
Horizon3.ai
CVE-2025-64155: FortiSIEM Analysis
Horizon3.ai details CVE-2025-64155, revealing chained FortiSIEM vulnerabilities enabling remote code execution and root access, analysis of the root cause, and indicators of compromise.
Bad Vibes: Comparing the Secure Coding Capabilities of Popular Coding Agents https://blog.tenzai.com/bad-vibes-comparing-the-secure-coding-capabilities-of-popular-coding-agents/
Tenzai
Blog | Tenzai - AI Security Research & Pentesting Insights
Writings from Tenzai researchers on autonomous offense, AI-driven pentesting, and hard security vulnerabilities. Real case studies and research from the field.
Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC #DroneHacking #FirmwareDumping #NANDFlash #ECCBruteforce #IoTResearch https://neodyme.io/en/blog/drone_hacking_part_1/
neodyme.io
Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC
Desoldering a drone's flash chip and reconstructing the firmware from broken data.
Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data #MicrosoftCopilot #RepromptAttack #DataTheft #SingleClickHack #AIVulnerability https://www.varonis.com/blog/reprompt
Varonis
Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data
Varonis Threat Labs discovered a way to bypass Copilot’s safety controls, steal users’ darkest secrets, and evade detection.