Curated security research, vulnerabilities, advisories and tools for practitioners.

Top security intelligence

High-signal security research, vulnerabilities, advisories and tools ranked by relevance. (Page 9)

241.

Four incident-response decisions from the Hugging Face breach

incident | 2026-07-29 00:00 | aikido.dev | original ↗ | #ai-security | #cloud | #featured

242.

CSS:the bomb inside your inbox

research | 2026-08-06 22:00 | portswigger.net | original ↗ | #ai-security | #browser-security | #data-exposure

243.

CVE-2026-26119 PoC: Windows Admin Center authenticated RCE

tool | 2026-08-09 20:21 | CVE-2026-26119 | github.com | original ↗ | #rce | #public-poc | #privilege-escalation

244.

Can AI do novel security research? Meet the HTTP Terminator

research | 2026-08-06 14:59 | portswigger.net | original ↗ | #ai-security | #agentic-ai | #vulnerability-research

245.

Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF

research | 2026-08-08 00:00 | CVE-2023-2156 | nebusec.ai | original ↗ | #privilege-escalation | #linux-kernel | #exploit

246.

CRLF-Powered Desync Attacks: Beheading HTTP Streams

research | 2026-08-05 23:30 | portswigger.net | original ↗ | #vulnerability-research | #attack-chains | #web-security

247.

keyv and cacheable npm Package Hijacked in Supply Chain Attack

incident | 2026-08-04 11:25 | wiz.io | original ↗ | #ai-security | #supply-chain | #malware

248.

Keyv and friends compromised in active Shai-Hulud supply chain attack

incident | 2026-08-04 00:00 | aikido.dev | original ↗ | #supply-chain | #incident-response | #malware

249.

Building secure Uniswap v4 hooks

blog | 2026-07-30 11:00 | blog.trailofbits.com | original ↗ | #web3 | #featured | #smart-contracts

250.

Why Choose AI Application Pentesting: Costs, Coverage, and Risk Reduction Compared

blog | 2026-08-07 12:07 | xbow.com | original ↗ | #ai-security | #pentesting | #agentic-ai

251.

AI Pentesting Benchmarks Are So Bad, We Made a New One

research | 2026-08-07 00:00 | ethiack.com | original ↗ | #ai-security | #pentesting | #benchmark

252.

Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE

research | 2026-08-07 00:00 | ethiack.com | original ↗ | #rce | #vulnerability-research | #attack-chains

253.

Orbien: lightweight high-performance intranet tunneling in Rust

tool | 2026-08-07 11:04 | github.com | original ↗ | #pentesting | #open-source | #rust

254.

Behind the GitLab RCE: A depthfirst Journey into the Ruby Ecosystem

research | 2026-07-27 12:00 | depthfirst.com | original ↗ | #rce | #supply-chain | #featured

255.

Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery

research | 2026-08-06 00:00 | crowdstrike.com | original ↗ | #ai-security | #incident-response | #benchmark

256.

Inside Astaroth's New Spambot Component

research | 2026-07-29 00:00 | crowdstrike.com | original ↗ | #featured | #threat-intelligence | #malware

257.

Identity Crisis: Novel Vulnerabilities Leading to Kerberos Downgrade, DoS, and Full Domain Takeover

research | 2026-08-05 22:35 | semperis.com | original ↗ | #active-directory | #denial-of-service | #privilege-escalation

258.

CTEM 101: Moving From Spreadsheets to Continuous Risk Reduction

blog | 2026-08-06 00:00 | bishopfox.com | original ↗ | #vulnerability-management | #ctem | #exposure-management

259.

Turning Enterprise Update Servers Into Backdoor Factories (0_o) – Part 1

research | 2026-08-05 17:15 | specterops.io | original ↗ | #supply-chain | #windows-security | #wsus

260.

CVE-2026-17543 PoC: PHP ext-pgsql SQL injection via backslash breakout

tool | 2026-08-06 17:05 | CVE-2026-17543 | github.com | original ↗ | #public-poc | #data-exposure | #php

261.

AI lectures with Dr. Brumley Part 3 | Securing the AI attack surface

blog | 2026-08-06 12:00 | bugcrowd.com | original ↗ | #ai-security | #attack-surface | #llm

262.

PimpMyCaido #1: Hunt client-side vulnerabilities with DOMLogger++

blog | 2026-08-06 07:47 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss

263.

Testing AI-powered systems at scale via Bug Bounty, part 3: the guardrails

blog | 2026-07-29 07:06 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #featured

264.

A few notes on AWS Nitro Enclaves: KMS integration

blog | 2026-08-05 11:00 | blog.trailofbits.com | original ↗ | #cloud | #cloud-security | #aws

265.

How we use /goal to find bugs in Patch the Planet

blog | 2026-07-28 11:00 | blog.trailofbits.com | original ↗ | #ai-security | #featured | #agentic-ai

266.

GitLab Secrets Manager adds ESO, Terraform, API support

blog | 2026-08-06 00:00 | about.gitlab.com | original ↗ | #gitlab | #devsecops | #kubernetes

267.

Confidential AI for GitLab Self-Hosted

blog | 2026-08-06 00:00 | about.gitlab.com | original ↗ | #ai-security | #cloud-security | #agentic-ai

268.

CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX

blog | 2026-08-07 00:00 | crowdstrike.com | original ↗ | #threat-detection | #detection-engineering | #ransomware

269.

A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit

vulnerability | Critical | 2026-07-21 00:00 | CVE-2026-11374 | bishopfox.com | original ↗ | #featured | #vulnerability-research | #account-takeover

270.

What Is Continuous Pentesting? A Definition for Engineering Teams

blog | 2026-08-06 16:56 | borghq.io | original ↗ | #pentesting | #appsec | #continuous-testing

← Previous More →