Januscape: New KVM Bug Lets a Malicious Cloud VM Crash Its Own Host
A newly disclosed Linux kernel bug shows the wall separating a cloud tenant's virtual machine from the physical server underneath it isn't as…
Bounty
HackerOne Disclose Security Incident
A popular security vulnerability coordination and bug bounty platform, HackerOne disclosed the security incident stating a then-employee had imprope…
Binance Hacked : 2 million BNB Stolen and Users Data on Sell
Another central Defi bridge has been exploited, and Binance’s Ethereum-compatible blockchain is the target. Binance Smart Chain (BSC) has been paused…
Facebook Code Execution Bug Worth $40,000
A security researcher, Andrey Leonov had discovered a critical bug on Facebook that leverage a Remote Code Execution vulnerability on Facebook ser…
2 Million Worth Bug in Polygon Blockchain Network
A security expert discovered a critical vulnerability in Polygon's second-tier solution that could lead to losses of $ 850 million. The project p…
ThirdWeb Discloses Smart Contract Vulnerability in Popular Open Source Library
ThirdWeb, a leading web3 development platform, recently disclosed a critical security vulnerability impacting some of its smart contracts. In a deta…
15-Year-Old Linux Kernel Bug 'GhostLock' Lets Any Local User Seize Root, Break Out of Containers
A privilege-escalation flaw that has quietly sat inside the Linux kernel since 2011 has finally been exposed — and it hands root access to any unpriv…
Critical Account Takeover Vulnerability Patched in GitLab Release
GitLab has announced the release of versions 16.7.2, 16.6.4, and 16.5.6 to patch multiple critical security vulnerabilities discovered in previous ve…
Bug in YouTube, Delete Videos With One Click
A Russian Security researcher have found a simple but critical security vulnerability in Google-owned video sharing site "YouTube" syste…
Instagram HACKED! Researcher Hacked into Instagram Server
Yup! You read write, hacker had accessed into the Instagram server and get into almost everything. A senior security researchers, Wesley Weinb…
WhatsApp Quietly Fixed Two Flaws That Could Make Malware Look Like a PDF
If you use WhatsApp on Windows, here is something worth knowing: until recently, an attacker could send you what looked like a harmless document — a …
Critical Vulnerability in Arc Browser's Legacy Boost Feature Patched
A security researcher identified a significant vulnerability in the Arc browser that could have allowed attackers to gain write access to a user'…
GitLab Addresses Critical Path Traversal Vulnerability - PoC Released
In a bid to thwart a severe security flaw, GitLab has urgently dispatched an update, version 16.0.1. This security patch addresses a critical path tr…
Vulnerability in Yahoo Allows hacker to Delete any Comments
After the multiple vulnerabilities reported on the eBay site, now security researchers are expanding their research and continuing their hunting.…
One Vulnerability Broke all Levels of MacOS Security
According to a report from the information security company Computest , the vulnerability in MacOS allows for a process injection attack in macOS and…
Sikkim Manipal University Site Hacked and Defaced by Indian Hacker
One of the reputed education institute of India " Sikkim Manipal University " have been hacked and defaced by hacker with the online han…
Copilot Autofix Bug Exposed Snowflake's Internal Jira
Wiz Research's autonomous "Red Agent" found and exploited a script injection flaw in Snowflake's public snowflake-connector-net re…
Researcher Used AI to Find $500,000 Worth of Bugs Across Google's Internal APIs
Security researchers from Brutecat have published a detailed account of how they built an AI-powered fuzzing pipeline — using Anthropic's Claude …
Hacker Claims to removed Mark Zuckerberg's Facebook Cover Photo
Mark Zuckerberg Hacked This is another big story that comes out today that, Egyptian Hacker with the nickname ' Dr.FarFar ', claimed tha…
A Single Git Push Was All It Took to Compromise GitHub — Millions of Repos Were Exposed
A critical vulnerability in GitHub's internal infrastructure allowed any authenticated user to execute arbitrary commands on GitHub's backend…