Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 7)

181.

Evidence at the Moment of Attack. Answers at AI Speed.

research | 2026-05-27 16:03 | wiz.io | Original ↗ | .md | #ai-security | #incident-response | #kubernetes

182.

CVE-2026-8054 — dotCMS Core Publish Audit API SQL Injection

research | 2026-05-27 00:00 | CVE-2026-8054 | aretiq.ai | Original ↗ | .md | #vulnerability-research | #sql-injection | #pre-auth

183.

Remove SPNs and Fix Kerberoasting

research | 2026-05-24 05:55 | projectblack.io | Original ↗ | .md | #remediation | #active-directory | #privilege-escalation

184.

Navigating a 7-Billion-Instruction Telegram TTD Trace with an AI Agent

research | 2026-05-25 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #android

185.

CVE-2026-9256 — NGINX ngx_http_rewrite_module Overlapping PCRE Captures Heap Buffer Overflow RCE

research | 2026-05-25 00:00 | CVE-2026-9256 | aretiq.ai | Original ↗ | .md | #rce | #heap-overflow | #nginx

186.

Webinar: Securing Post-Quantum Implementations Against Physical Attacks

research | 2026-05-22 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

187.

Two Bypasses for Chrome's Sanitizer API

research | 2026-05-22 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research

188.

Revisiting a Masked AES Side-Channel Attack in half a day with AI

research | 2026-05-21 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #hardware-security

189.

How OLTs may have exposed entire ISP networks

research | 2026-05-18 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #cloud-security | #attack-chains

190.

CVE-2026-45434 — Apache OFBiz LoginWorker checkLogin Password-Change Flow Authentication Bypass RCE

research | 2026-05-20 00:00 | CVE-2026-45434 | aretiq.ai | Original ↗ | .md | #rce | #authentication-bypass | #cve-2026-45434

191.

esDynamic 2026.4: Moving side-channel and fault-injection analysis to the next step

research | 2026-05-19 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #post-quantum-cryptography | #cryptography

192.

Reverse Engineering SmartLoader: Where Commodity Malware and Operational Tooling Diverge

research | 2026-05-18 19:54 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #reverse-engineering

193.

CVE-2026-23412 — Linux Kernel Netfilter BPF Hook Use-After-Free LPE

research | 2026-05-18 00:00 | CVE-2026-23412 | aretiq.ai | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #use-after-free

194.

Abusing Redirect Discrepancies to leak secrets in URLs

research | 2026-05-18 00:00 | ethiack.com | Original ↗ | .md | #secrets | #web-security | #research

195.

Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP

research | 2026-05-15 09:09 | swarm.ptsecurity.com | Original ↗ | .md | #vulnerability-research | #memory-safety | #php

196.

NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability

research | 2026-05-13 12:00 | CVE-2026-42945 | depthfirst.com | Original ↗ | .md | #rce | #vulnerability-research | #memory-corruption

197.

How TeamPCP's Python Toolkit Survives a C2 Takedown: FIRESCALE, GitHub, and the Victim's Own Account

research | 2026-05-14 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware

198.

Mythos for Offensive Security: XBOW's Evaluation

research | 2026-05-12 12:00 | xbow.com | Original ↗ | .md | #ai-security | #benchmark | #reverse-engineering

199.

CVE-2026-41089 — Microsoft Windows Netlogon BuildSamLogonResponse Stack-based Buffer Overflow RCE

research | 2026-05-13 00:00 | CVE-2026-41089 | aretiq.ai | Original ↗ | .md | #rce | #denial-of-service | #stack-overflow

200.

The IGVM File Format

research | 2026-05-06 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #confidential-computing | #virtualization

201.

Gibbon v30.0.00: Authenticated SQL Injection and RCE

research | 2026-05-06 23:12 | projectblack.io | Original ↗ | .md | #rce | #vulnerability-research | #sql-injection

202.

Using IDA to Find Bugs in IDA (with Claude)

research | 2026-05-08 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #claude

203.

GPT-5.5 vs Claude Opus 4.7 vs Sonnet 4.6: OpenAI's Frontier Cyber Model Faces Anthropic's Best on Vulnerability Validation

research | 2026-05-06 13:19 | hackerone.com | Original ↗ | .md | #ai-security | #vulnerability-management | #benchmark

204.

Analysing an exploit on VLC on Windows using TTD and AI agentic

research | 2026-05-07 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #software-security

205.

CVE-2026-7270: How I Get Root on FreeBSD with a Shell Script

research | 2026-05-07 00:00 | CVE-2026-7270 | calif.io | Original ↗ | .md | #vulnerability-research | #lpe | #freebsd

206.

Paramiko Security Audit

research | 2026-05-04 22:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #vulnerability-research | #security-audit

207.

Autonomous AI Cyber Defense You Can Trust in Production

research | 2026-05-06 12:15 | horizon3.ai | Original ↗ | .md | #ai-security | #vulnerability-research

208.

Customer AMA webinar recap: Schibsted

research | 2026-05-05 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #bugcrowd | #case-study

209.

Ghosts of Encryption Past - How we Read All Your Emails in Salesforce Marketing Cloud

research | 2026-05-05 00:00 | slcyber.io | Original ↗ | .md | #cloud | #rce | #vulnerability-research

210.

Copy.fail: Why Internal LLMs Are Non-Negotiable for Security

research | 2026-05-04 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #software-security

← Previous More →