15-Year-Old Linux Kernel Bug 'GhostLock' Lets Any Local User Seize Root, Break Out of Containers
A privilege-escalation flaw that has quietly sat inside the Linux kernel since 2011 has finally been exposed — and it hands root access to any unpriv…
Posts
Critical Unpatched Flaw in CyberPanel Lets Any User Seize Root on the Server
A newly disclosed zero-day in CyberPanel — one of the most widely deployed open-source hosting control panels — allows any authenticated user, even o…
19-Year-Old Linux Kernel Bug Earns $80K Bounty, Grants Root in Under a Second
A single line of code merged into the Linux kernel back in 2007 sat quietly for nearly two decades before anyone realized it could hand attackers a f…
Root Access for the Taking: 'Bad Epoll' Exploit Code Now Public
A working exploit for a Linux kernel vulnerability that hands any logged-in user a root shell is now sitting in the open, and the flaw it targets is …
8 Best Continuous Threat Exposure Management (CTEM) Tools in 2026
Security teams have never had more vulnerability data at their disposal. Modern organizations run multiple scanners, cloud security platforms, applic…
GTA 6 Sets New Pricing Floor at $79.99 — Pre-Orders Open
Rockstar Games just did something the gaming industry has been waiting for: it confirmed the price. Grand Theft Auto VI will cost $79.99 for the Sta…
One Malicious Link, Full Root Access — Nebula Security Demos the World's First Android 17 Exploit Chain
Clicking an unknown link has always been risky advice, but a new exploit published today makes the danger more visceral than ever. YC-backed security…
9 Top SAST Tools for Language-Specific Security Testing in 2026
Static analysis is often purchased as if every language were the same problem. It is not. A Rails application has framework conventions that a generi…
Meta's Mandatory Employee Spy Program Leaked Workers' Private Data to the Entire Company
The program built to watch Meta's employees ended up watching out for no one. Meta has paused its controversial Model Capability Initiative (MCI)…
CVE-2026-55200 — Critical libssh2 Flaw Enables Zero-Auth RCE
A critical security flaw in libssh2 — the SSH library silently embedded in curl, backup utilities, and IoT firmware worldwide — lets unauthenticated …