Januscape: New KVM Bug Lets a Malicious Cloud VM Crash Its Own Host
A newly disclosed Linux kernel bug shows the wall separating a cloud tenant's virtual machine from the physical server underneath it isn't as…
Posts
15-Year-Old Linux Kernel Bug 'GhostLock' Lets Any Local User Seize Root, Break Out of Containers
A privilege-escalation flaw that has quietly sat inside the Linux kernel since 2011 has finally been exposed — and it hands root access to any unpriv…
Critical Unpatched Flaw in CyberPanel Lets Any User Seize Root on the Server
A newly disclosed zero-day in CyberPanel — one of the most widely deployed open-source hosting control panels — allows any authenticated user, even o…
19-Year-Old Linux Kernel Bug Earns $80K Bounty, Grants Root in Under a Second
A single line of code merged into the Linux kernel back in 2007 sat quietly for nearly two decades before anyone realized it could hand attackers a f…
Root Access for the Taking: 'Bad Epoll' Exploit Code Now Public
A working exploit for a Linux kernel vulnerability that hands any logged-in user a root shell is now sitting in the open, and the flaw it targets is …
8 Best Continuous Threat Exposure Management (CTEM) Tools in 2026
Security teams have never had more vulnerability data at their disposal. Modern organizations run multiple scanners, cloud security platforms, applic…
GTA 6 Sets New Pricing Floor at $79.99 — Pre-Orders Open
Rockstar Games just did something the gaming industry has been waiting for: it confirmed the price. Grand Theft Auto VI will cost $79.99 for the Sta…
One Malicious Link, Full Root Access — Nebula Security Demos the World's First Android 17 Exploit Chain
Clicking an unknown link has always been risky advice, but a new exploit published today makes the danger more visceral than ever. YC-backed security…
9 Top SAST Tools for Language-Specific Security Testing in 2026
Static analysis is often purchased as if every language were the same problem. It is not. A Rails application has framework conventions that a generi…
Meta's Mandatory Employee Spy Program Leaked Workers' Private Data to the Entire Company
The program built to watch Meta's employees ended up watching out for no one. Meta has paused its controversial Model Capability Initiative (MCI)…
CVE-2026-55200 — Critical libssh2 Flaw Enables Zero-Auth RCE
A critical security flaw in libssh2 — the SSH library silently embedded in curl, backup utilities, and IoT firmware worldwide — lets unauthenticated …
Why Security Teams Use EASM to Think Like an Attacker
Every day, attackers are likely scanning your organization's internet-facing assets, looking for a way in. Most security teams know their core in…
Reliable Android VPN: The Mobile Web3 Checklist for Safer Financial Apps
A dependable VPN for Android should be on before you open a wallet, exchange, banking app, or payment tool on a network that is not yours. Still, VPN…
X, Reddit, and Zoom Down Globally Due to Zayo Network Outage
On Monday evening, X (formerly Twitter) buckled under a wave of outage reports stretching from India to the United States — and the culprit wasn'…
Squidbleed: 1997 Squid Proxy Bug Leaks HTTP Credentials
Security researchers have uncovered a nearly three-decade-old vulnerability in Squid Proxy that lets anyone sharing the same proxy silently steal oth…