An RCE flaw was found in Brotli, a Google-built open-source data compression algorithm.
The Coruna iOS exploit kit now ships with a DarkSword iOS 18 chain on 608 domains. zLabs breaks down its delivery, native ...
Over the past few months, we’ve used an unreleased, internal research model to find critical vulnerabilities in some of the ...
Orange Tsai built a complete Microsoft Edge exploit chain using only logic bugs—no memory corruption, no AI—to win the Pwnie ...
A significant security vulnerability has been identified in Google's Brotli decoder, impacting various software platforms ...
A newly disclosed Microsoft Edge exploit chain combines logic vulnerabilities and Windows functionality to escape the browser ...
In October 2026, a critical vulnerability related to Node.js became a hot topic under the names "HTTP2Shell" and "Node2Shell".The identification number is "CVE-2026-111497".In short, the issue lies in ...
PHP is a programming language tailored for web development, and it now supports nearly 70 percent of the world’s websites. We ...
Last week, some website administrators may have finally taken a breath after finishing their response to a critical PHP ...
Anthropic says an unreleased AI model built five working exploit chains across major platforms in lab tests; the reported ...
Anthropic says Claude chained software flaws into working exploits, highlighting the growing role of AI in vulnerability ...