Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access
Swati KhandelwalAug 17, 2026Vulnerability / Mobile Security Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that...
published
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign...
15 AI Security Lessons From Black Hat and Ai4 2026
On July 29, 2026, Kiteworks published the 2026 Data Security and Compliance Risk: Annual Survey Report, a survey of 459...
More on the OpenAI Agent’s Attack on Hugging Face
More on the OpenAI Agent’s Attack on Hugging Face Hugging Face has published a detailed timeline of the attack. From...
Secure by Design in practice: a year of progress on Sophos Firewall
A year ago we published our Secure by Design 2025 progress update, reviewing our commitments against the seven pillars of...
Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
Swati KhandelwalJul 28, 2026Vulnerability / Linux STAR Labs has published a Linux kernel exploit that turns an ordinary local user...
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security researchers at depthfirst published working exploit code on July 24 for a GitLab...
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Swati KhandelwalJul 24, 2026Vulnerability / Enterprise Security Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that...
Volume Is Not Risk: Making Sense of the “Vulnpocalypse”
According to the FIRST Exploit Prediction Scoring System (EPSS), only around 5% of all published CVEs are ever observed being...
AI Agents Are Creating a New Enterprise Security Gap
In the week ending June 29, 2026, five independent security research teams published findings that collectively describe the same structural...
Unpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12...
One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public
Swati KhandelwalJun 08, 2026Linux / Vulnerability Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that...
Game Over: WeedHack – The Rise of Minecraft Malware-as-a-Service Campaigns
Authored by Aayush Tyagi Introduction Minecraft is a 2011 sandbox game developed and published by Mojang Studios. It is the...
Encore Performance: Sophos ranked #1 Overall in Endpoint, EDR, XDR, MDR, and Firewall for the 2nd consecutive time in the G2 Summer 2026 Reports
G2 has published its Summer 2026 Reports, and customers once again ranked Sophos as a top security vendor. For the second...
Speaking at the IV National Cybersecurity Forum in Baku: Building Cyber Resilience Before the Clock Starts
Published: 1 June 2026 Speaking at the IV National Cybersecurity Forum in Baku: Building Cyber Resilience Before the Clock Starts...
