The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of…
CVE-2016-5195, known as Dirty COW, is a Linux kernel privilege escalation vulnerability that allows local users to gain write access to read-only…
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that exploits network address translation (NAT) connection state to hijack…
A newly disclosed Linux kernel vulnerability, dubbed Zapscape and tracked as CVE-2026-64561, could allow an attacker with kernel privileges inside an L1…
Researchers from MIT CSAIL have unveiled a novel attack technique called Interrupt Injection that can bypass Spectre v2 mitigations on Intel and…
A newly disclosed memory corruption vulnerability in the Linux kernel's Open vSwitch (OVS) datapath, tracked as CVE-2026-64531 and codenamed OVSwrap, allows unprivileged…
Nebula Security researchers have demonstrated that a single visit to a malicious webpage can compromise the Tor Browser by exploiting a patched…
GhostLock (CVE-2026-43499) is a Linux kernel futex flaw used as the second stage of the IonStack exploit to gain root access on…
STAR Labs researcher Lee Jia Jie used AI to discover and develop an exploit for CVE-2026-53264, a Linux kernel privilege escalation vulnerability.…
The vulnerability CVE-2026-53264 was independently reported by Kyle Zeng (KyleBot) shortly before the TyphoonPwn 2026 competition. Lee Jia Jie later published a…