A previously unknown threat actor, tracked as UTA0576, exploited a chain of three zero-day vulnerabilities in Ivanti Connect ...

The air around us rarely announces itself. Exhaust from a busy road, dust from a building site, smoke from burning leaves, ...

I copied research notes and configuration files for small business tools to a different folder. Since the copy process ...

Even when an external API is failing, you continue to attempt the same connection with every new request. Even if individual ...

WinFetch, makes satellite radar data acquisition reproducible and lets researchers plan multi-frame InSAR studies before ...

Researchers linked the campaign to earlier Kimsuky operations involving Endpoint ransomware. Similarities include reused ...

Anthropic OSS Scanner, launched October 8, 2026, gives open-source projects free AI-powered vulnerability scanning using ...

ClickFix attacks fake CAPTCHA pages to trick users into running malicious commands, delivering malware through compromised websites.

Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network ...

An open-source AI research workbench with 23 built-in Skills, 525 marketplace Skills, 36 research connectors, and four agent ...

Citrix NetScaler zero-day vulnerabilities CVE-2026-88771 and CVE-2026-88772 triggered mass internet exploitation within minutes of a proof-of-concept release. With 100+ organizations already ...

PortSwigger removed a SameSite Lax CSRF bypass lab after citing Chrome updates. Independent tests across 8 Chrome versions ...