Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
Security researchers at Nebula Security’s VEGA team have disclosed GhostLock (CVE-2026-43499), a use-after-free vulnerability in the Linux kernel’s real-time mutex (futex priority-inheritance) code that has been sitting unpatched for approximately…
Summary Two critical vulnerabilities in the Cursor AI code editor, collectively dubbed “DuneSlide” by researchers at Cato AI Labs, allow a single prompt injection to escape the editor’s safety sandbox…
Summary Offensive security startup Assail has launched Sidewinder, a complete redesign of its Ares platform that operates as an autonomous red team AI capable of auditing its own work, fixing…
Summary A pseudonymous security researcher going by “bikini” has published “Exploitarium,” a GitHub repository containing over 30 proof-of-concept exploits for zero-day vulnerabilities in widely used open-source projects — without performing…
Summary Researchers at cloud security company Sysdig have identified what they believe to be the first fully autonomous ransomware attack conducted entirely by an AI agent. Linked to the JadePuffer…
Summary Technical details and a working proof-of-concept exploit for CVE-2026-46242, a Linux kernel privilege escalation vulnerability dubbed “Bad Epoll,” have been publicly released. The vulnerability allows unprivileged local users to…
Summary A new data-stealing malware dubbed ChocoPoC is actively targeting vulnerability researchers by hiding in fake proof-of-concept exploit repositories on GitHub. Discovered jointly by YesWeHack and Sekoia on July 1,…
Skyhawk Security has published research demonstrating that its agentic AI red team system achieved full administrative control of a financial services company’s entire AWS organization in a matter of seconds…
Security researchers at XM Cyber have publicly disclosed CVE-2026-39118, a macOS vulnerability that allows a standard (non-root) user to silently disable Endpoint Detection and Response (EDR) and Mobile Device Management…
Summary A critical authentication bypass vulnerability in SimpleHelp (CVE-2026-48558), a popular remote monitoring and management (RMM) platform, is being actively exploited to deploy “Djinn Stealer” — a previously undocumented cross-platform…