Check Point Research has disclosed a technique that abuses Microsoft Defender's own legitimately signed boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level…
Three independent research efforts presented at Black Hat USA 2026 and in subsequent disclosures have demonstrated practical attacks against passkey implementations, undermining…
New research presented at Black Hat USA 2026 reveals that CSS and HTML techniques can break out of email message boundaries to…
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack…
PortSwigger researcher Gareth Heyes presented new CSS-based attacks at Black Hat USA 2026 that can break webmail defenses to steal passwords and…
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that exploits network address translation (NAT) connection state to hijack…
Security researchers have uncovered a class of vulnerabilities in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel that allow attackers…
Co-founders Hedi Ingber and Aviyam Ivgi of Stealth presented the CoreBreak pattern at Black Hat USA 2026, revealing vulnerabilities in AWS, Google,…
A now-patched vulnerability in Azure Cosmos DB could have allowed an attacker to escape the service's Gremlin query sandbox and gain full…
Black Hat USA 2026 is a major cybersecurity conference held in Las Vegas, featuring briefings on the latest research and vulnerabilities. The…