← Latest

#vuln

1. Fake Kernel Threads Are Hiding Backdoors on Linux Servers and Appliances

   eclypsium.com Nov 6, 2026 researchvulnmalwaredetection notes

2. Fake security tools on GitHub push backdoors and infostealers

   bleepingcomputer.com Nov 6, 2026 vulnmalwareprivacyctidlp notes

3. The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions

   elastic.co Nov 6, 2026 vulnmalwareidentityprivacychrome-extensionbrowserctidlp notes

4. M365 Token Spray and Replay Campaign Compromises Business Email Accounts↗

   huntress.com Nov 6, 2026 cloudincidentvulnidentityprivacyctidetectioncampaign-compromises notes

5. Cybersecurity Dive: Hackers could poison AI models by tampering with core infrastructure

   eclypsium.com Nov 6, 2026 vulnai notes

6. Vulnerability Discovery and Exploitation Trends in the AI Era

   cloud.google.com Nov 6, 2026 researchvulnai notes

7. ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft↗

   cloud.google.com Nov 6, 2026 appsecincidentvulnaptransomwarecticve-2026-35273shinyhuntersunc6240campaign-targeting notes

8. MadApe: The Code That Opens the Door↗

   group-ib.com Nov 6, 2026 researchcloudvulnidentityctitooling notes

9. Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers

   thehackernews.com Nov 6, 2026 appseccloudvulnmalwareaichrome-extensionbrowser notes

10. mSecure password manager hack prompts password reset warnings↗

    bleepingcomputer.com Nov 6, 2026 appsecincidentvulnidentityprivacydlp notes

11. How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders

    crowdstrike.com Nov 6, 2026 vuln notes

12. Backporting security fixes at scale with Codex

    blog.trailofbits.com Nov 6, 2026 vulnaitooling notes

13. Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It↗

    thehackernews.com Nov 6, 2026 appsecvulncve-2026-83844 notes

14. Managed for Malice: How Attackers Turn MDM into Remote Access

    huntress.com Nov 6, 2026 researchvulnmalwarecti notes

15. Threat actors use agentic AI tooling to find and abuse exposed secrets↗

    microsoft.com Nov 6, 2026 appseccloudvulnidentityaiprivacyartexctitooling notes

16. Making HTTP header injection critical with one prompt

    portswigger.net Nov 6, 2026 appsecresearchvulntooling notes

17. Camera Management Software Compromise Leads to Malware Deployment

    huntress.com Nov 6, 2026 researchincidentvulnmalwarectidetection notes

18. Critical Rails Bug Threatens to Derail Vulnerable Servers

    darkreading.com Nov 5, 2026 appsecvulnprivacysupply-chain notes

19. Windows Exploitation Techniques: Dangling COM Object Registrations

    projectzero.google Nov 5, 2026 researchvulncve-2026-66804cve-2026-50343 notes

20. Truffle Security launches program to revoke 1.4 million live secrets

    bleepingcomputer.com Nov 5, 2026 appsecvulnidentityprivacytoolingdlp notes

21. OpenSSH flaw lets attackers log into password-disabled Linux accounts

    bleepingcomputer.com Nov 5, 2026 appsecvulnidentitysupply-chain notes

22. Prediction Markets Emerge as a New Vertical for Traffer Teams

    recordedfuture.com Nov 5, 2026 vulncti notes

23. How to fix a bug in a fix

    projectzero.google Nov 5, 2026 appsecvuln notes

24. Scalable Vector Grief

    portswigger.net Nov 5, 2026 appsecresearchvulnbrowser notes