Researchers Turn Claude Code and Codex Into Malware Launchers With a Poisoned README
Ask an AI coding agent to review an open-source library for security flaws, and it might just run the malware hiding inside it instead. That's th…
Posts
Januscape: New KVM Bug Lets a Malicious Cloud VM Crash Its Own Host
A newly disclosed Linux kernel bug shows the wall separating a cloud tenant's virtual machine from the physical server underneath it isn't as…
15-Year-Old Linux Kernel Bug 'GhostLock' Lets Any Local User Seize Root, Break Out of Containers
A privilege-escalation flaw that has quietly sat inside the Linux kernel since 2011 has finally been exposed — and it hands root access to any unpriv…
Critical Unpatched Flaw in CyberPanel Lets Any User Seize Root on the Server
A newly disclosed zero-day in CyberPanel — one of the most widely deployed open-source hosting control panels — allows any authenticated user, even o…
19-Year-Old Linux Kernel Bug Earns $80K Bounty, Grants Root in Under a Second
A single line of code merged into the Linux kernel back in 2007 sat quietly for nearly two decades before anyone realized it could hand attackers a f…
Root Access for the Taking: 'Bad Epoll' Exploit Code Now Public
A working exploit for a Linux kernel vulnerability that hands any logged-in user a root shell is now sitting in the open, and the flaw it targets is …
8 Best Continuous Threat Exposure Management (CTEM) Tools in 2026
Security teams have never had more vulnerability data at their disposal. Modern organizations run multiple scanners, cloud security platforms, applic…
GTA 6 Sets New Pricing Floor at $79.99 — Pre-Orders Open
Rockstar Games just did something the gaming industry has been waiting for: it confirmed the price. Grand Theft Auto VI will cost $79.99 for the Sta…
One Malicious Link, Full Root Access — Nebula Security Demos the World's First Android 17 Exploit Chain
Clicking an unknown link has always been risky advice, but a new exploit published today makes the danger more visceral than ever. YC-backed security…
9 Top SAST Tools for Language-Specific Security Testing in 2026
Static analysis is often purchased as if every language were the same problem. It is not. A Rails application has framework conventions that a generi…