SpecterOps: Adversary-Focused Security Research
SpecterOps is a security company that conducted research on a post-exploitation technique enabling Chrome DevTools Protocol activation inside running Chrome or Edge…
Tag: Security Research
pwn.ai Discovers Critical WordPress XSS Chain
pwn.ai, a security research firm, discovered and responsibly disclosed CVE-2026-64638, a pre-authentication XSS vulnerability in WordPress that can lead to PHP code…
Synack Validates NatJack Attacks Against Real-World Products
Synack, a security company, confirmed that researcher Malcolm Stagg tested NatJack techniques against dozens of real-world network infrastructure products from multiple vendors…
MIT CSAIL Researchers Discover Interrupt Injection Attack
Researchers Daniël Trujillo and Mengjia Yan from MIT CSAIL discovered the Interrupt Injection attack, which bypasses Spectre v2 defenses on Intel and…
Interrupt Injection Paper Accepted at USENIX Security
The research paper on Interrupt Injection is scheduled to be presented at USENIX Security in Baltimore. The paper details the TONTOU attack…
Block: Security Research Firm
Block is a security research firm that traced the Coldcard firmware flaw to a production config issue in the libngu library, which…
FearsOff Cybersecurity: Security Research Firm
FearsOff Cybersecurity, through researcher Kirill Firsov, responsibly disclosed CVE-2026-16723 to Alibaba on July 21, 2026.
Defused Assists in Clop Web Shell Analysis
Defused, a security research group, helped identify the Clop-linked web shell activity.
GitHub Slashes Public Bug Bounty Payouts by Half, Launches VIP Tier for Top Researchers
Beginning July 27, 2026, GitHub will reduce public bug bounty payouts by at least 50% across all severity levels, moving top rewards…
Arctic Wolf Labs Uncovers AitM Phishing Campaign
Arctic Wolf Labs, the research division of Arctic Wolf, identified and analyzed a widespread AitM phishing campaign targeting Microsoft 365 accounts. Their…