Curated security research, vulnerabilities, advisories and tools for practitioners.

Latest published

The latest security coverage ordered by original publication time. (Page 9)

241.

AI Pentesting Benchmarks Are So Bad, We Made a New One

research | 2026-08-07 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #benchmark

242.

Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE

research | 2026-08-07 00:00 | ethiack.com | original ↗ | #rce | #vulnerability-research | #attack-chains

243.

CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX

blog | 2026-08-07 00:00 | crowdstrike.com | original ↗ | #threat-detection | #detection-engineering | #ransomware

244.

CSS:the bomb inside your inbox

research | 2026-08-06 22:00 | portswigger.net | original ↗ | #ai-security | #browser-security | #data-exposure

245.

CVE-2026-17543 PoC: PHP ext-pgsql SQL injection via backslash breakout

tool | 2026-08-06 17:05 | CVE-2026-17543 | github.com | original ↗ | #public-poc | #data-exposure | #php

246.

What Is Continuous Pentesting? A Definition for Engineering Teams

blog | 2026-08-06 16:56 | borghq.io | original ↗ | #pentesting | #appsec | #continuous-testing

247.

Can AI do novel security research? Meet the HTTP Terminator

research | 2026-08-06 14:59 | portswigger.net | original ↗ | #ai-security | #agentic-ai | #vulnerability-research

248.

Cloud Threat Highlights: H1 2026

blog | 2026-08-06 14:03 | wiz.io | original ↗ | #ai-security | #cloud | #supply-chain

249.

Agentic Development Security is a Discipline that Starts Before the First Line of Code

blog | 2026-08-06 13:01 | jfrog.com | original ↗ | #ai-security | #agentic-ai | #devsecops

250.

AI lectures with Dr. Brumley Part 3 | Securing the AI attack surface

blog | 2026-08-06 12:00 | bugcrowd.com | original ↗ | #ai-security | #attack-surface | #llm

251.

Wiz Brings Automated DISA STIG Assessment to Amazon Linux 2023 and Windows Server 2025

blog | 2026-08-06 12:00 | wiz.io | original ↗ | #compliance | #windows-server | #fedramp

252.

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

blog | 2026-08-06 07:47 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss

253.

CTEM 101: Moving From Spreadsheets to Continuous Risk Reduction

blog | 2026-08-06 00:00 | bishopfox.com | original ↗ | #vulnerability-management | #ctem | #exposure-management

254.

Security update available for Metabase - Please upgrade now

blog | 2026-08-06 00:00 | metabase.com | original ↗ | #cloud | #zero-day | #sql-injection

255.

Python Software Foundation - Python 3.11.0a3 to 3.15.0b2

vulnerability | Medium | 2026-08-06 00:00 | CVE-2026-12003 | bishopfox.com | original ↗ | #privilege-escalation | #windows | #python

256.

GitLab Secrets Manager adds ESO, Terraform, API support

blog | 2026-08-06 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #kubernetes

257.

Confidential AI for GitLab Self-Hosted

blog | 2026-08-06 00:00 | about.gitlab.com | original ↗ | #ai-security | #cloud-security | #agentic-ai

258.

Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery

research | 2026-08-06 00:00 | crowdstrike.com | original ↗ | #ai-security | #incident-response | #benchmark

259.

What is AI harness engineering?

blog | 2026-08-06 00:00 | aikido.dev | original ↗ | #ai-security | #agentic-ai | #ai-safety

260.

CRLF-Powered Desync Attacks: Beheading HTTP Streams

research | 2026-08-05 23:30 | portswigger.net | original ↗ | #vulnerability-research | #attack-chains | #web-security

261.

Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover

research | 2026-08-05 22:35 | semperis.com | original ↗ | #active-directory | #denial-of-service | #privilege-escalation

262.

Turning Enterprise Update Servers Into Backdoor Factories (0_o) – Part 1

research | 2026-08-05 17:15 | specterops.io | original ↗ | #supply-chain | #windows-security | #wsus

263.

XBOW Alternatives: Comparing Autonomous AI Pentesting Platforms

blog | 2026-08-05 14:23 | borghq.io | original ↗ | #ai-security | #pentesting | #agentic-ai

264.

New CTEM Metrics That Matter: How to Brief Your Board on AI-Accelerated Exposure

blog | 2026-08-05 13:22 | hackerone.com | original ↗ | #ai-security | #vulnerability-management | #ctem

265.

The Secret Sauce of SLSA: DevGovOps at the Speed of Agentic AI

blog | 2026-08-05 13:15 | jfrog.com | original ↗ | #ai-security | #supply-chain | #compliance

266.

Bugmageddon: When AI breaks the security model

blog | 2026-08-05 12:00 | bugcrowd.com | original ↗ | #ai-security | #vulnerability-management | #remediation

267.

A few notes on AWS Nitro Enclaves: KMS integration

blog | 2026-08-05 11:00 | blog.trailofbits.com | original ↗ | #cloud | #cloud-security | #aws

268.

Desktop AI Supercomputers and Automated Cyberattacks

blog | 2026-08-05 00:00 | CVE-2025-7775 | netlas.io | original ↗ | #ai-security | #threat-intelligence | #netscaler

269.

Who was behind the attack? Possibly nobody

blog | 2026-08-05 00:00 | aikido.dev | original ↗ | #ai-security | #agentic-ai | #incident-response

270.

The Aikido Machine: on-prem AI pentesting that never leaves your network

blog | 2026-08-05 00:00 | aikido.dev | original ↗ | #ai-security | #cloud | #pentesting

← Previous More →