Researchers Turn Claude Code and Codex Into Malware Launchers With a Poisoned README
Ask an AI coding agent to review an open-source library for security flaws, and it might…
Category
Vulnerability
15-Year-Old Linux Kernel Bug ‘GhostLock’ Lets Any Local User Seize Root, Break Out of Containers
A privilege-escalation flaw that has quietly sat inside the Linux kernel since 2011 has finally been…
Critical Unpatched Flaw in CyberPanel Lets Any User Seize Root on the Server
A newly disclosed zero-day in CyberPanel — one of the most widely deployed open-source hosting control…
One Malicious Link, Full Root Access — Nebula Security Demos the World’s First Android 17 Exploit Chain
Clicking an unknown link has always been risky advice, but a new exploit published today makes…
CVE-2026-55200 — Critical libssh2 Flaw Enables Zero-Auth RCE
A critical security flaw in libssh2 — the SSH library silently embedded in curl, backup utilities,…
Squidbleed: 1997 Squid Proxy Bug Leaks HTTP Credentials
Security researchers have uncovered a nearly three-decade-old vulnerability in Squid Proxy that lets anyone sharing the…
OpenAI’s Codex AI Discovers “HTTP/2 Bomb” That Can Crash Major Web Servers in Seconds
An AI model just found a decade-old attack that human security researchers somehow missed — and…
An AI Security Tool Dug Up a 2-Year-Old Redis Bug That Lets Attackers Take Over Servers
A flaw that sat undetected in Redis for over two years — silently present in every…
A Forged Kernel Key and a Rootful Helper: Inside the CIFSwitch Linux Privilege Escalation
A security researcher has disclosed a Linux local privilege escalation — dubbed CIFSwitch — that lets…