Curated security research, vulnerabilities, advisories and tools for practitioners.

Top security intelligence

High-signal security research, vulnerabilities, advisories and tools ranked by relevance. (Page 8)

211.

From P-Code to GNN: extract binary code semantics

blog | 2026-08-12 22:00 | blog.quarkslab.com | original ↗ | #reverse-engineering | #binary-analysis | #machine-learning

212.

Scale Your Engineering Organization Without Losing Control

blog | 2026-08-14 14:14 | jfrog.com | original ↗ | #devsecops | #devops | #jfrog

213.

Inside the Metabase SQLi: Exploited in the Wild

vulnerability | 2026-08-10 12:30 | CVE-2026-72898 | wiz.io | original ↗ | #ai-security | #cloud | #sql-injection

214.

Securing Data in the AI era

blog | 2026-08-14 12:19 | wiz.io | original ↗ | #ai-security | #cloud | #cloud-security

215.

AI lectures with Dr. Brumley Part 4 | Offense using AI: What autonomous cyber means for your attack surface

blog | 2026-08-13 12:00 | bugcrowd.com | original ↗ | #ai-security | #attack-surface | #offensive-security

216.

Can AI invent new attack techniques? New research from James Kettle and PortSwigger Research

blog | 2026-08-12 09:04 | portswigger.net | original ↗ | #ai-security | #black-hat | #web-security

217.

From Hugging Face to Fable: this summer shows AI control matters more than trust

blog | 2026-08-13 22:31 | aikido.dev | original ↗ | #ai-security | #aikido | #ai-agents

218.

When read-only mounts in Docker Sandboxes become writable

blog | 2026-08-13 22:30 | aikido.dev | original ↗ | #ai-security | #container-security | #aikido

219.

Join us for AI Analytics Week

blog | 2026-08-14 00:00 | metabase.com | original ↗ | #ai-security | #metabase | #ai-analytics

220.

CVE-2026-24031 PoC: Dovecot SQL authentication bypass and user enumeration

tool | 2026-08-12 23:19 | CVE-2026-24031 | github.com | original ↗ | #public-poc | #authentication-bypass | #sql-injection

221.

How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign

blog | 2026-08-13 15:04 | wiz.io | original ↗ | #cloud | #incident-response | #github

222.

Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain

blog | 2026-08-13 13:48 | wiz.io | original ↗ | #ai-security | #supply-chain | #appsec

223.

How Trail of Bits helps verify the integrity of your Signal chats

blog | 2026-08-11 17:30 | blog.trailofbits.com | original ↗ | #cryptography | #privacy | #audit

224.

Inside the ECB’s AI Cyber Directive: What EU Banks Need to Know

blog | 2026-08-13 10:52 | jfrog.com | original ↗ | #ai-security | #supply-chain | #jfrog

225.

From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse

research | 2026-08-11 00:00 | lab.ctbb.show | original ↗ | #rce | #supply-chain | #zero-day

226.

A sandbox is only as closed as what an AI agent can reach

blog | 2026-08-12 00:00 | about.gitlab.com | original ↗ | #ai-security | #zero-day | #gitlab

227.

How GitLab tracks vulnerabilities through refactors and reformatting

blog | 2026-08-12 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #vulnerability

228.

KindaRails2Shell - Critical RCE in Rails via Active Storage (CVE-2026-66066)

vulnerability | Critical | 2026-07-29 00:00 | CVE-2026-66066 | ethiack.com | original ↗ | #rce | #ruby-on-rails | #active-storage

229.

CVE-2026-68138 PoC: Linux qdisc rate-table race local privilege escalation

tool | 2026-08-11 22:22 | CVE-2026-68138 | github.com | original ↗ | #public-poc | #kernel-security | #privilege-escalation

230.

Python Software Foundation - Python 3.11.0a3 to 3.15.0b2

vulnerability | Medium | 2026-08-06 00:00 | CVE-2026-12003 | bishopfox.com | original ↗ | #privilege-escalation | #windows | #python

231.

Bypassing Android Hardware Attestation from the Analyst's Chair

blog | 2026-08-10 22:00 | blog.quarkslab.com | original ↗ | #android | #reverse-engineering | #mobile-security

232.

JFrog Artifactory Now Integrates Natively with Artifact Registry in Google Cloud

blog | 2026-08-12 13:33 | jfrog.com | original ↗ | #cloud | #supply-chain | #jfrog

233.

The OffSec challenge that hobbles security teams

blog | 2026-08-11 07:45 | yeswehack.com | original ↗ | #bug-bounty | #vulnerability-management | #offsec

234.

Finding vulnerabilities at every stage: what to run, and when

blog | 2026-08-12 00:00 | aikido.dev | original ↗ | #ai-security | #pentesting | #devsecops

235.

More Cryptanalysis Makes Us All Safer

blog | 2026-08-10 00:00 | bughunters.google.com | original ↗ | #ai-security | #cryptography | #security-research

236.

Security-focused Metabase Release Announcement

blog | 2026-08-12 00:00 | metabase.com | original ↗ | #vulnerability | #metabase | #patch

237.

Inside a Russian-Speaking Operator's Ukrainian IP Camera Toolkit

research | 2026-08-10 00:00 | hunt.io | original ↗ | #threat-intelligence | #exploitation | #ip-camera

238.

CVE-2026-60004: Gitea diffpatch remote code execution with public PoC

vulnerability | Critical | 2026-07-28 00:00 | CVE-2026-60004 | github.com | original ↗ | #rce | #gitea | #git

239.

How to Test Business Logic Vulnerabilities in a SaaS Application

blog | 2026-08-11 10:10 | borghq.io | original ↗ | #authorization | #business-logic | #api-testing

240.

Introducing dfs-large1: A New Frontier for Cybersecurity

research | 2026-07-30 12:00 | depthfirst.com | original ↗ | #ai-security | #featured | #agentic-ai

← Previous More →