Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

23:20 UTC· 15m ago

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

today 149K visits · 150K views · 51 reads·all time 1.2M views

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

Go (Organization): news timeline & CVEs · ZeroHour

today 149K visits · 150K views · 51 reads·all time 1.2M views

23:20 UTC· 15m ago

Organization

Go

2 mentions in 7 days · 2 in 30 days · 2 total · first seen Oct 8, 2026 · last 4h ago

Search everything

Timeline2 articles

Appears with

vendor Google 2 product golang.org/x/net 1 product Go 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.

Fwd: Vulnerabilities in golang.org/x/net

Go released golang.org/x/net v0.60.0 to fix HTTP/2 server memory exhaustion caused by Trailer headers.

The Go project tagged golang.org/x/net v0.60.0 to address security issues, according to a notice forwarded to oss-security. One issue is HTTP/2 server memory exhaustion triggered by Trailer headers. The announcement does not list a CVE or say the flaw is being exploited.

oss-security·19:28 UTC · 4h agoVulnerability

Fwd: Go 1.27.2 and Go 1.26.9 are released

Go released 1.27.2 and 1.26.9 with security fixes, including an HTTP/2 net/http server issue.

Alan Coopersmith forwarded a Go announcement that Go 1.27.2 and Go 1.26.9 are released. The visible text cites Go's security policy and a net/http HTTP/2 server issue. The oss-security excerpt does not list CVE identifiers or report exploitation.

oss-security·19:26 UTC · 4h agoVulnerability