Researchers have demonstrated that open-source Android AI agent frameworks are vulnerable to a novel attack chain where invisible screen text can lead…
Landon Peng of Lunbun LLC reported the CVE-2026-14266 vulnerability to 7-Zip on June 5, 2026. Lunbun LLC is a security research firm.
Strix is an AI penetration testing company whose agent, via GitHub user bearsyankees, discovered the identity binding bug in n8n's token exchange…
Artificial intelligence (AI) is transforming offensive security by accelerating code analysis, payload generation, and testing workflows. However, the core standard of proving…
ZDI is a vulnerability disclosure program run by Trend Micro that rewards researchers for responsibly disclosing vulnerabilities. It provided independent counts and…
Researchers at the University of Michigan, along with partners from the University of New Mexico and IIT Delhi, developed the MVPNalyzer framework…
Bynario is a security research firm whose researcher Alfredo Pesoli discovered and reported CVE-2026-65400 and CVE-2026-43760 to Apple.
Qurium, a security research firm, was part of the team that tied the Popa proxy botnet to NetNut, owned by Alarum Technologies.
Synthient, a security firm, conducted controlled tests showing traffic sent into NetNut's commercial gateway exited through a device enrolled in Popa, providing…
YesWeHack is a bug bounty platform that co-discovered the ChocoPoC campaign with Sekoia, highlighting the threat to vulnerability researchers.