A single HTTP header parsing flaw behind HTTP2Shell and PHP2Shell has reached .NET, FFmpeg, ClickHouse, and Apache Arrow, with active exploitation prompting emergency patches.
Learn how to identify and patch exposed BeyondTrust Remote Support appliances vulnerable to a critical security flaw.
Reproducing the public PoC for the unpatched LMCache RCE reveals a critical unauthenticated remote code execution vulnerability in LLM caching infrastructure.
An analysis of the ShieldCrash Windows Defender zero-day that bypasses Microsoft’s patch and can expose arbitrary file reads as SYSTEM on affected Windows systems.
An audit-focused analysis of a Cleo Harmony vulnerability that lets remote attackers abuse JWT refresh handling to escalate privileges and reach higher-privileged access.
An analysis of active exploitation against PaperCut NG/MF servers, covering affected systems, likely attack vectors, and the urgent detection and hardening steps defenders should take.
A practical guide to patching a critical cPanel full-server-control flaw while containing risk and keeping client sites online.
An analysis of the NVIDIA NemoClaw vulnerability showing how DNS rebinding can let attackers hijack AI agents and what developers should check to harden their defenses.
A developer-focused analysis of the critical isolated-vm vulnerability that allowed untrusted JavaScript to escape its sandbox and execute code on the host.
A practical security-focused analysis of the actively targeted critical MLflow vulnerability, with guidance for hardening self-hosted deployments before attackers can exploit them.
CISA’s warning about an actively exploited VMware vCenter path traversal flaw highlights the need to verify patch status, review exposure, and strengthen detection before attackers can leverage vulnerable infrastructure.
A practical analysis of GitLab’s emergency patch for a critical vulnerability that could let attackers delete projects, with security implications and defensive priorities for developers and admins.
An analysis of the CoSnitch-style Microsoft Copilot vulnerability, how a one-click attack path could expose sensitive data, and the key defensive steps teams should take.
An AI-discovered Redis 0-day prompts a practical look at hardening exposed Redis servers with defensive configuration, access controls, and incident-ready safeguards.
An analysis of the RefluXFS Linux kernel vulnerability, explaining how the XFS flaw could lead to root access and what developers can do to harden kernel code against similar bugs.
An analysis of VMware Avi Load Balancer authentication-bypass vulnerabilities, covering how the flaw is detected, what systems are affected, and the patching and mitigation steps defenders should prioritize.
This post explains the critical authentication bypass in the Gitea Docker image, its impact on exposed deployments, and the practical steps developers can take to patch and harden affected systems.
A hands-on reconstruction of the Oracle PeopleSoft vulnerability chain behind the Nissan breach, with practical code-level fixes and defensive guidance.
A technical breakdown of an Opera GX zero-click vulnerability that could let a malicious website exfiltrate user data without interaction, with analysis of likely attack flow and practical defenses.
An analysis of the Microsoft Edge remote code execution bug that examines how the exploit chain works, what it exposes about browser trust boundaries, and what defenders should prioritize.
A developer-focused look at how attackers are probing Gitea Docker CVE-2026-20896 shortly after disclosure, with practical guidance for hardening containerized deployments.
An analysis of CitrixBleed that explains how the memory corruption flaw enabled session hijacking, why it was rapidly exploited, and what defenders should do to reduce risk.
An analysis of how a missing authorization check likely enabled the Android vulnerability reported by security engineer Rony Das and why the fix matters for device security.
A developer-focused analysis of the DirtyClone Linux vulnerability, how cloned packets can lead to root access, and the packet-handling hardening steps teams should prioritize.