Vulnerability Research

CVE-2026-109618 - PHP2Shell a week on: crashes on the web, root on PAN-OS Vulnerability

eMudhra's CA keys fit in a byte, and curl and Node still trusted them Byte

CVE-2026-94127 - F5 BIG-IP APM OAuth heap overflow to unauthenticated RCE Vulnerability

CVE-2026-107181 - Telegram Desktop one-click account takeover Vulnerability

Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers Byte

VMs Won't Contain Cyber-Capable Agents Byte

CVE-2026-64561 - Zapscape, a KVM/x86 guest-to-host escape Vulnerability

CVE-2026-50656 - ShieldBreak PoC claims a Defender RoguePlanet patch bypass Vulnerability

Testing Claude Mythos Preview For Code Security Byte

Antares: Small Models for Vulnerability Localization Byte

CVE-2026-31431 - Copy Fail: Linux kernel page-cache write to root Vulnerability

CVE-2026-43284 - "Dirty Frag" Linux page-cache LPE via ESP and RxRPC Vulnerability

CVE-2026-46300 - Fragnesia: Linux kernel page-cache overwrite to root Vulnerability

Behind the LLM Cybersecurity Hype 4 min read

The same vendors publishing breakthrough numbers on LLM cyber capability are publishing the disclaimers in the same posts. Read both halves and the picture changes.

Anthropic's Claude Mythos Preview finds thousands of unknown flaws Byte

Anthropic's red team and Mozilla find 22 Firefox CVEs with Claude Byte

LLM agents wrote over 40 QuickJS exploits for Sean Heelan Byte

CVE-2026-2441 - Crash PoC for Chrome's CSS font feature use-after-free Vulnerability

BREAKMEIFYOUCAN: Keyspace Reduction Attacks on NXP NFC Tags Vulnerability

CVE-2025-15467 - AISLE found all 12 OpenSSL January 2026 CVEs Vulnerability

Drone Hacking Part 1: Dumping Firmware and Bruteforcing ECC Byte

Fake PoCs Wasting Everyone's Time Byte

CVE-2025-20702 - Airoha Bluetooth chips expose RACE debug protocol Vulnerability

Lyra Rebane builds multi-step clickjacking from SVG filters Byte

AI and the Software Vulnerability Lifecycle Byte