Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
Security researchers at SOCRadar exposed a sophisticated, China-linked web application backdoor operation dubbed WP-SHELLSTORM in early July 2026. The operation, attributed to a financially motivated Webshell Access Brokerage Operation (WABO),…
Security researchers have confirmed active exploitation of CVE-2026-20896, a critical authentication bypass vulnerability (CVSS: 9.8) affecting Gitea official Docker images through version 1.26.2. The flaw allows an attacker to impersonate…
Security researchers at Nebula Security’s VEGA team have disclosed GhostLock (CVE-2026-43499), a use-after-free vulnerability in the Linux kernel’s real-time mutex (futex priority-inheritance) code that has been sitting unpatched for approximately…
Summary Two critical vulnerabilities in the Cursor AI code editor, collectively dubbed “DuneSlide” by researchers at Cato AI Labs, allow a single prompt injection to escape the editor’s safety sandbox…
Summary Offensive security startup Assail has launched Sidewinder, a complete redesign of its Ares platform that operates as an autonomous red team AI capable of auditing its own work, fixing…
Summary A pseudonymous security researcher going by “bikini” has published “Exploitarium,” a GitHub repository containing over 30 proof-of-concept exploits for zero-day vulnerabilities in widely used open-source projects — without performing…
Summary Researchers at cloud security company Sysdig have identified what they believe to be the first fully autonomous ransomware attack conducted entirely by an AI agent. Linked to the JadePuffer…
Summary Technical details and a working proof-of-concept exploit for CVE-2026-46242, a Linux kernel privilege escalation vulnerability dubbed “Bad Epoll,” have been publicly released. The vulnerability allows unprivileged local users to…
Summary A new data-stealing malware dubbed ChocoPoC is actively targeting vulnerability researchers by hiding in fake proof-of-concept exploit repositories on GitHub. Discovered jointly by YesWeHack and Sekoia on July 1,…
Skyhawk Security has published research demonstrating that its agentic AI red team system achieved full administrative control of a financial services company’s entire AWS organization in a matter of seconds…