57
47
47
55
55
60
47
Fwd: UnrealIRCd 6.2.7 released & hot-patch to fix security issues for existing installations
Clarification: UnrealIRCd Websockets and JSON-RPC interfaces involved in 6.2.7 security fixes are disabled by default.
Sam James forwards the UnrealIRCd 6.2.7 release announcement and clarifies that neither Websockets nor JSON-RPC are enabled by default. This limits exposure of the security issues addressed by the release and accompanying hot-patch for existing installations.
15
55
60
47
30
Cloudflare Workers Spectre Attack Leaks JWT From Co
Researchers demonstrated a remote Spectre attack leaking a JWT between co-located Cloudflare Workers at 12 bits per second, 360x the 2021 rate.
Security researchers showed a remote Spectre attack against Cloudflare Workers that leaked a JWT from a co-located Worker at up to 12 bits per second with 99.16% accuracy, 360 times the 2021 demonstration rate. The attack exploited weaknesses in DyPrIs dynamic process isolation, where long-lived Durable Object invocations could run before isolation and WebSocket-heavy I/O suppressed the branch-misprediction signal. Cloudflare deployed improved DyPrIs, the V8 Sandbox, and MPK-based in-process isolation, and found no indicators of active exploitation over three years.
58
47
60
42
60
47
February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from January
60
30
47
30
60
New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability
60
Talos reported WebKit flaws in WebKit that allow Remote Code Execution
60
60
60
30
30
47
42
60
55
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability
60
55
47
60
55
55
47