Curated security research, vulnerabilities, advisories and tools for practitioners.

Latest published

The latest security coverage ordered by original publication time. (Page 5)

121.

VMs won't contain cyber-capable agents

blog | 2026-08-26 11:00 | blog.trailofbits.com | original ↗ | #ai-security | #cloud | #zero-day

122.

1inch Bug Bounty Report: Aqua Edition, H1 2026

blog | 2026-08-26 10:32 | hackenproof.com | original ↗ | #bug-bounty | #web3 | #smart-contracts

123.

Dojo challenge #53 Hacker Club solution

blog | 2026-08-26 07:42 | yeswehack.com | original ↗ | #bug-bounty | #rce | #pentesting

124.

Signature Optional - Analysis of CVE-2026-28323

vulnerability | 2026-08-26 00:00 | CVE-2026-28323 | bishopfox.com | original ↗

125.

Traefik | Version Through 3.7.11

blog | 2026-08-26 00:00 | bishopfox.com | original ↗ | #denial-of-service | #vulnerability | #reverse-proxy

126.

A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console

vulnerability | Critical | 2026-08-26 00:00 | bishopfox.com | original ↗ | #rce | #backup-security | #authentication

127.

Philippine Nuclear Agency and Naval Contractor Targeted by Suspected Chinese-Speaking Operator Using Known Vulnerabilities

blog | 2026-08-26 00:00 | CVE-2023-49105 | hunt.io | original ↗ | #rce | #threat-intelligence | #attack-surface

128.

Git was built for humans — agents need an upgrade

blog | 2026-08-26 00:00 | about.gitlab.com | original ↗ | #ai-security | #supply-chain | #git

129.

Aikido launches agentic pentesting for Android apps

blog | 2026-08-26 00:00 | aikido.dev | original ↗ | #ai-security | #pentesting | #appsec

130.

Making room for what's next in the GitLab UI

blog | 2026-08-26 00:00 | about.gitlab.com | original ↗ | #gitlab | #devops | #frontend

131.

Software supply chain security requires decisions rather than defaults

blog | 2026-08-26 00:00 | aikido.dev | original ↗ | #supply-chain | #appsec | #dependency-management

132.

Aikido Security achieves ISO 42001:2023 certification for AI governance

blog | 2026-08-26 00:00 | aikido.dev | original ↗ | #ai-security | #ai-governance | #certification

133.

What's in a tag name? JavaScript, apparently

research | 2026-08-25 14:24 | portswigger.net | original ↗ | #browser-security | #web-security | #xss

134.

Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin

blog | 2026-08-25 13:02 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #claude-code

135.

Coding Agents Just Reopened Your Software Supply Chain Blind Spot

blog | 2026-08-25 12:36 | jfrog.com | original ↗ | #ai-security | #supply-chain | #npm

136.

Chrome DevTools for Coding Agents: Official MCP Server for Browser Inspection & Automation

tool | 2026-08-25 11:35 | github.com | original ↗ | #ai-security | #mcp | #devtools

137.

Heap buffer overflow in scale_nearest_neighbor() via duplicate Alpha planes from nested iden/auxl items

vulnerability | Critical | 2026-08-25 11:17 | github.com | original ↗ | #rce | #memory-corruption | #vulnerability

138.

State divergence enables unauthorized access

blog | 2026-08-25 11:00 | blog.trailofbits.com | original ↗ | #web3 | #access-control | #vulnerability

139.

Flexense SyncBreeze – Unauthenticated Remote Code Execution (0DAY-2025-0002)

vulnerability | Critical | 2026-08-25 06:58 | crowdfense.com | original ↗ | #rce | #zero-day | #authentication-bypass

140.

Robin: AI-Powered Dark Web OSINT & Threat Intelligence Investigation Tool

tool | 2026-08-25 00:38 | github.com | original ↗ | #ai-security | #threat-intelligence | #osint

141.

Scale software delivery pipelines in isolation without owning the runner fleet

blog | 2026-08-25 00:00 | about.gitlab.com | original ↗ | #gitlab | #compliance | #devops

142.

Could OpenClaw have actually hacked that Australian gym? We decided to test it.

blog | 2026-08-25 00:00 | aikido.dev | original ↗ | #ai-security | #ai-safety | #aikido

143.

CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments

blog | 2026-08-24 17:00 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #cloud

144.

SAST and Business Logic Vulnerabilities: What Static Analysis Can Reach

blog | 2026-08-24 16:38 | borghq.io | original ↗ | #appsec | #sast | #security-testing

145.

Agent Immunization: A New Model for Building Trusted AI Agents

blog | 2026-08-24 15:31 | jfrog.com | original ↗ | #ai-security | #devsecops | #mcp

146.

Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain

blog | 2026-08-24 15:30 | jfrog.com | original ↗ | #supply-chain | #devops | #jfrog

147.

Why Self-Healing Is the Only Way to Secure at Frontier AI Speed

blog | 2026-08-24 12:58 | jfrog.com | original ↗ | #ai-security | #supply-chain | #appsec

148.

Threat Hunting with AI: Why it Matters and the Role of Autonomous Pentesting Tools

blog | 2026-08-24 12:00 | xbow.com | original ↗ | #ai-security | #pentesting | #detection-engineering

149.

Fly Graduates: Agentic Repository Experience Lands in the JFrog Platform

blog | 2026-08-24 07:38 | jfrog.com | original ↗ | #ai-security | #devops | #product-update

150.

Shai-Hulud was the best thing to happen to supply chain security

blog | 2026-08-24 00:00 | aikido.dev | original ↗ | #supply-chain | #npm | #aikido

← Previous More →