F5 launches AI Security Platform to put security leaders in control of enterprise AI risk (F5, Inc.) F5 acquires SurePath AI to enhance new AI Security Platform, tackle shadow AI risks, and deliver ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Researchers disclosed usbliter8, a SecureROM exploit affecting older Apple devices that can bypass boot protections with physical access.

Security research firm Paradigm Shift today published details of a new BootROM vulnerability affecting Apple's A12 and A13 chips, along with a working proof-of-concept exploit named "usbliter8". The ...

Linux kernel privilege escalation exploit DirtyClone (CVE-2026-43503) is publicly documented: JFrog published a working attack walkthrough Thursday showing how any local user can gain root on ...

Buffer overflow vulnerabilities have driven remote code execution for decades and keep appearing in critical network ...

A new exploit called BioShocking convinces AI browsers they're playing a game, then gets them to hand over your private ...

A newly disclosed use-after-free in the Linux kernel's epoll code, CVE-2026-46242, lets an unprivileged user get root on ...

The zero-day "nightmare" apparently isn't over for Microsoft, as a disgruntled researcher who's been feuding with the company for the past three months has dropped yet another proof-of-concept (PoC) ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today that hackers are now actively exploiting a recently patched high-severity SolarWinds Serv-U flaw to crash servers. Serv-U ...

Update: Added statement from Microsoft to the end of this article. A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just hours after Microsoft fixed two ...