WHATS CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability
MSRC Security Update Guide ·
WHATS
THE HAX?
Top story
Also in coverage
CISA director pick already drawing concern from Hill Dems over Palantir connection
CyberScoop ·
November Patch Tuesday: An Overflowing Cornucopia of CVEs
darkreading ·
N-able N-central gets emergency fix two days after 33 exploits published
CSO Online ·
Article feed
60 sources ↓CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability
CVE-2026-50423 Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-55043 Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-55123 Microsoft PowerPoint Remote Code Execution Vulnerability
CISA director pick already drawing concern from Hill Dems over Palantir connection
The US wants its quantum lead to turn into factories and supply chains
Microsoft fixes over 1,000 vulnerabilities in November Patch Tuesday
Vanderbilt University reels following ransomware attack claimed by BYOD group
Cisco Identity Services Engine Authorization Bypass Vulnerabilities
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Cisco Meraki Security Hardening Release: October 2026
November Patch Tuesday: An Overflowing Cornucopia of CVEs
Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon
F-Secure Identifies 26 Ways AI Can Harm Consumers, and Where to Stop Them
Supabase Security findings why RLS is only 25% of the issues
Cracking Server 2022 NTLMv1-SSP Hashes with Rainbow Tables
Kubernetes Non-Core Security Audit
N-able N-central gets emergency fix two days after 33 exploits published
Microsoft’s AI bug hunter finds Rust flaw that went undetected for nearly 11 years
Qubole supply chain attack exposed AWS, Entra ID, and Okta credentials
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Want to Rent an Internet Address at the White House?
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog
Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room
iOS Sandbox Escape Is Public, and Apple Hasn’t Confirmed a Fix
US Army member arrested in UK over allegations of spying for Russia
Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
AI company Fireworks says hackers stole data, billing info during October breaches
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
Claude Code is accidentally exposing secrets all over GitHub
Microsoft releases Windows 10 KB5131096 extended security update
Hackers exploit trusted AWS access to breach multiple cloud environments
Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day
Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
News alert: OffSec broadens cyber security training beyond pen testing as AI reshapes skills needs
SHARED INTEL Q&A: AI tools slip open-source snippets past SBOMs, hiding bugs and license risks
News alert: Insignary offers free scanner to help companies detect PHP2Shell, Node2Shell
Exploited Outlook Zero-Day Among 1,094 Flaws Patched by Microsoft
Adobe Patches 110 Vulnerabilities Across 9 Products
Software Transparency Is Changing: Allan Friedman on SBOM, AI BOMs and What Comes Next
Microsoft Patch Tuesday November 2027 , (Tue, Nov 10th)
Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)
ISC Stormcast For Tuesday, November 10th, 2026 https://isc.sans.edu/podcastdetail/10172, (Tue, Nov 10th)
Site Traffic Recommendations: 4 Steps to Reduce Agentic Risk
AI Agent Order Data: Agentic Commerce on Forter’s Network
How to Stop Holiday Return Abuse and Reseller Fraud
Chinese AI Tried to Phone Home. Nobody Knows Why | Threat Wire
Introducing Theme Studio Pro
A 12-Year-Old Security Flaw Was Just the Beginning | Threat Wire
Firefox free VPN drops its 50GB launch cap until January 31
X.Org patches eight server vulnerabilities a month after fixing 12 others
AI reverse engineering let researchers add a new feature to Slack
KongTuke ClickFix comes for a Canadian treasure: Canada Dry
Operation Snowball: Inside an Autonomous AI Intrusion Campaign
CISA added OpenSSH SSHole and three other flaws to KEV (due 12 Nov). What's your musl/Alpine SSH inventory looking like?
Is Iran Behind the Recent String of Refrigerator Cyberattacks?
What the Midterm Results Could Mean for US Cybersecurity Policy
53% of Organizations Lack Definition For 'Normal' AI Agent Behavior
CISA Expands Incident Reporting Form While CIRCIA Mandate Waits
Russia-Linked Turla Hijacks Exchange Servers to Spy on NATO and EU Emails
Cloud Vulnerabilities Surge Fourfold in Less Than a Year
Iranian hackers turned up the heat on French supermarket freezers, says France
Smashing Security podcast #491: How AI agents are spooking the banks
Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents
Why Your Company Needs an AI Policy (Ask a CISO)
Are CTF Platforms Useful? (Ask a CISO)
DEF CON CTF Walkthrough: OSINT Edition
Payload Podcast 013 - Catchup
ClickFix Cache Trick
Taking your PHP Website Offline
New OpenSSH Vulnerability
AI Security
Friday Squid Blogging: New Jurassic Squid Predecessors
CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog
How Banks Can Spot Scams That Pass Authentication
Fraud Costs Financial Institutions More Than Money
Payment Processors Compete on Checkout With Passkeys
IT threat evolution in Q3 2026. Non-mobile statistics
IT threat evolution in Q3 2026. Mobile statistics
Virtualization security: attack layers and misconfiguration impact
Security Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
A New AI Tool From Google DeepMind Proved the Signal Protocol Is Secure
DHS Has Used This Controversial Investigative Tool 185,000 Times Since Trump Took Office
DoppelCart Fraud Network Grows to More Than 250,000 Domains
GhostFrame: A new ESXi Implant Linked to Settra Ransomware
October 2026 CVE Landscape
FORGE Lab uses agentic tools to identify memory safety issues in Rust
ARTEX abuse expands as cybercriminals target financial sector
Threat actors use agentic AI tooling to find and abuse exposed secrets
I Almost Missed This Kubernetes Vulnerability
Meta paid a $300,000 bounty for this
OpenAI paid $5000 for this account takeover vulnerability that could also leak your private chats
13.3 million people’s medical data exposed; companies pay $300,000
A week in security (November 2 – November 8)
Big Tech sues over California plan to limit kids’ scrolling
Making a Nothingx app desktop client using my android app.
/r/ReverseEngineering's Weekly Questions Thread
Playing with the STM32MP2
Universal BLE→USB dongle for ZMK
Vulnerabilities in global legislation
The Adversary v0.8.0-alpha for Cardputer/ADV is out!
Troubleshooting .json file in Microsoft Defender Workbook
Urgent HELP my telegram got hacked
Getting tired of the nepotism in the industry - U.S
He Invented the USB Rubber Ducky to Fix Printers!
Why This Robot Runs Its AI on Board
The Fake Interview in Binance’s $6.3B Hack
Got a MBR Bootkit
Live fake Cloudflare site for researchers
RE
HackTheBox - Garfield
HackTheBox - MakeSense
HackTheBox - Checkpoint
DEF CON 34 - Main - How Dealer Installed AntiTheft System Exposes 1M+ Cars - A Schulman, J Yu, Y Wei
DEF CON 34 - Main - Bird Hunting Season The Final Flight - Jon Gaines
DEF CON 34 - BugBounty - How Cache Poisoning Led to Critical Acct Takeover in TikTok's Web - G Chong
you need to use Herdr RIGHT NOW!!
this WiFi GPU is wild.....
local AI's biggest problem... they solved it?
How an Image Causes a Heap Buffer Overflow // libheif
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
MDR vs SOC: How to choose the right option for your organisation
The best due diligence on a vendor is who they’ve worked with
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
ZDI-CAN-33928: Microsoft
Fromage-Gate: Old-School Hacking Tactics vs. French Supermarkets
Understanding the Blast Radius of a Cryptographic Change
Eliminating the Blind Spots Between Humans, Machines, and AI
SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware
Gorbag: Orcs at the border harvesting intelligence from Ukraine
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 989 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.