AndDone Researcher Gerjan Wemekamp Discovers Kaltura mwEmbed Flaws
AndDone, a security research firm, is credited with discovering two unpatched vulnerabilities in Kaltura's mwEmbed player library. Researcher Gerjan Wemekamp reported the…
Tag: Security Research
Escape Researcher Comments on Keycloak Security
Escape researcher Enzo Mongin highlighted the broader impact of Keycloak vulnerabilities, noting that attackers crossing Keycloak's boundaries can access everything behind it.
Nextron Systems GmbH: Discovered Malicious Rust Crate
Nextron Systems GmbH's Research Team initially discovered and reported the malicious proc-macro1 crate to the Rust Security Response Team. Their analysis detailed…
ThreatFabric Uncovers Manic Android Malware
ThreatFabric, a Dutch security company, discovered and analyzed the Manic Android malware. Their technical report details the malware's capabilities, including financial fraud,…
OpenAI Pauses Frontier RL Training to Bolster AI Safety Defenses
OpenAI has announced a temporary pause in reinforcement learning (RL) training for its most advanced AI models to strengthen safety and security…
Oligo Security Research Uncovers Ray Vulnerability
Oligo, a security company, discovered the fetch bypass in Ray that led to CVE-2025-62593. Researcher Avi Lumelsky is credited with the discovery.…
NorthScan: Threat Intelligence and Security Research
NorthScan, represented by Heiner García, contributed to the investigation by analyzing infrastructure and behavioral patterns of suspected DPRK operatives, helping to identify…
1Password: Password Manager and Security Company
1Password is a password manager and security company that provides tools for secure credential management. It conducted research on the effectiveness of…
USENIX WOOT Conference
USENIX WOOT is a security conference where the research on SIM card attacks was presented. The paper highlights the attack surface of…
DigitalOcean: Cloud Infrastructure Provider
DigitalOcean is a cloud infrastructure provider whose security team discovered the miniOrange SAML vulnerabilities after observing anomalous admin session attempts. They reported…