Search: “vulnerability reporting”

24,778 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 8623 Exploit / PoC 4570 Ransomware 4315 Data breach 2020 Malware 2006 Threat actor 1050 Policy & legal 959 Phishing & fraud 601 Industry 214 Advisory 173 AI safety & security 165 Research 68 Tools 37 Model release 25

SeverityAll critical 14429 high 5683 medium 4017 low 451 info 304

GitHub Pays $100,000 Bounty for Critical RCE Flaw in Git Push Pipeline

GitHub paid Saif Ghani $100,000 for CVE-2026-3854, a critical unauthenticated RCE in its Git push pipeline allowing command execution on backend infrastructure.

GitHub awarded researcher Saif Ghani $100,000, its largest publicly disclosed bug bounty, for CVE-2026-3854, a critical unauthenticated remote code execution flaw in its Git push processing pipeline. A crafted repository URL could trigger arbitrary command execution on backend infrastructure, threatening source code integrity, repository secrets, and software supply chains. GitHub deployed mitigations and completed a patch rollout through coordinated disclosure before technical details became public.

Cyber Security NewsSep 14, 08:50 UTC · 2d agoVulnerability CVE-2026-38542

Chinese researchers warn blockchain company EOS about 'epic' vulnerability in soon-to

CyberScoopMay 30, 15:50 UTC · May 30, 2018Vulnerability in the wild

EOS Node Remote Code Execution Vulnerability — EOS WASM Contract Function Table Array Out of Bounds

Security AffairsMay 29, 12:48 UTC · May 29, 2018Vulnerability

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

The Hacker NewsJul 21, 11:38 UTC · Jul 21, 2026Exploit / PoC in the wildCVE-2026-56164 CVE-2026-56155 CVE-2026-32201+2 CVEs

Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack

Help Net SecurityJul 5, 00:00 UTC · Jul 5, 2026Vulnerability in the wildCVE-2026-12569 CVE-2026-48558 CVE-2026-46817

Vulnerability Spotlight: YAML Parsing Remote Code Execution Vulnerabilities in Ansible Vault and Tablib

Cisco TalosSep 14, 14:30 UTC · Sep 14, 2017Vulnerability in the wildCVE-2017-2809 CVE-2017-28101

Vulnerability Spotlight: Kakadu SDK Vulnerabilities

Cisco TalosAug 4, 16:31 UTC · Aug 4, 2017Vulnerability

Vulnerability Spotlight: Certificate Validation Flaw in Apple macOS and iOS Identified and Patched

Cisco TalosMar 27, 20:09 UTC · Mar 27, 2017Vulnerability CVE-2017-2485

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development

OpenAI released GPT-5.6-Cyber for vulnerability research and pentesting via Daybreak Red, completing 95% of advanced cyber task evaluations.

GPT-5.6-Cyber, built on GPT-5.6 Sol, targets zero-day discovery, exploit chain development and incident response with reduced refusals, scoring 95.0% on OpenAI's Advanced Cybersecurity Completion Rate versus 1.5% for GPT-5.6 Sol and 57.3% for GPT-5.5-Cyber. The model found CVE-2026-15903 (CVSS 8.8), an out-of-bounds read/write in Chrome's V8 JavaScript engine that Google patched in mid-July 2026. It is available to trusted partners including CrowdStrike, Palo Alto Networks and Cloudflare through the Daybreak Red access tier.

The Hacker NewsAug 11, 13:11 UTC · Aug 11, 2026Model release CVE-2026-15903

Just 1% of AI-Discovered Vulnerabilities Exploited in the Wild

Infosecurity MagazineJul 29, 10:15 UTC · Jul 29, 2026Exploit / PoC in the wild

Vulnerability Spotlight: Total Commander FileInfo Plugin Denial of Service

Cisco TalosJul 17, 10:13 UTC · Jul 17, 2015Vulnerability CVE-2015-2869

Why the Right Metrics Matter When it Comes to Vulnerability Management

The Hacker NewsFeb 1, 15:16 UTC · Feb 1, 2024Vulnerability

Zero

Infosecurity MagazineMar 28, 16:40 UTC · Mar 28, 2022Ransomware in the wild

GrammaTech CodeSentry 3.0 improves software supply chain security

Help Net SecurityJan 20, 00:00 UTC · Jan 20, 2022Exploit / PoC

Vulnerability Spotlight: Microsoft Windows CDD Font Parsing KernelMemory Corruption

Cisco TalosSep 8, 11:23 UTC · Sep 8, 2015Vulnerability1

Inductive Automation Ignition

CISA reports a permissions flaw (CVE-2026-77393, CVSS 8.8) in Inductive Automation Ignition <=8.1.53 letting authenticated users create projects; fixed in 8.1.54.

CISA republished Inductive Automation's advisory for CVE-2026-77393, an incorrect default permissions issue (CWE-276) in Ignition 8.1.53 and earlier. The Gateway "Create Project Role(s)" setting shipped blank, allowing any authenticated user who can execute gateway scripts to create projects. Ignition 8.1.54 restricts project creation to Designer sessions and the 8.3 series is unaffected. CISA notes no known public exploitation of this vulnerability.

CISA AdvisoriesSep 3, 12:00 UTC · 13d agoAdvisory CVE-2026-77393

ZAST.AI Raises $6M Pre-A to Scale "Zero False Positive" AI

The Hacker NewsMay 20, 06:22 UTC · May 20, 2026Exploit / PoC

Semperis adds vulnerability assessment, security reporting, and auto-remediation to its DSP

Help Net SecurityJun 25, 00:00 UTC · Jun 25, 2020Vulnerability

From Report to Patch, the OpenBSD Errata Process

A talk walks through the OpenBSD errata process, tracing how vulnerability reports become coordinated, tested, and published security patches.

A Lobsters-linked presentation describes the OpenBSD errata process, covering how a security report travels from initial disclosure to a published patch and errata notice. The linked page itself contains no additional technical detail beyond the title.