PT-2026-91887

First CVE IDs are in — MITRE assigned 10 CVEs to our research CVE-2026-88557 → 88566. All 10 were found, verified end-to-end, and disclosed first by our AI-driven research pipeline. Every single one ships a full root-cause analysis and a working, reproducible PoC — public since day one, no...

Astra Linux – Vulnerability in Firefox and Thunderbird

Additional techniques that built upon the slipstream research, combined with a malicious web page, could have exposed both hosts within an internal network as well as services running on the user’s local machine. This vulnerability affects Firefox versions earlier than 85...

CVE-2026-73310

creationtimestamp| type| source ---|---|--- 2026-09-13 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvgfidi2bi2p...

turnstile

Archivo de investigación de Turnstile Código de investigación histórico y notas técnicas. Los lanzadores activos están deshabilitados. La extensión de captura registra metadatos únicamente desde fixtures locales. FO1 HTTP 400 permanece sin resolver. Las capturas privadas, las credenciales, el lib...

hermes-agent v2026.9.11

Hermes Agent ☤ Hermes Agent | Hermes Desktop The self-improving AI agent built byNous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a...

Exploit for Use After Free in Microsoft

CVE-2026-42978-PoC-Research CVE-2026-4...

CVE-2026-8301: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. This issue affects Pardus Boot Repair: before 1.0.8...

CVE-2026-11765: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

flagembedding (>=1.2.0, <=1.2.2), keycare (>=0.0.1, <=0.1.0) +1 more potentially affected by CVE-2026-9856 via transformers (4.33.0)

transformers PYPI version 4.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - flagembedding =1.2.0, =0.0.1, =0.1.15, =0.2.13 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

linux-kernel-atlas

linux-kernel-atlas Living map of Linux kernel security rese...

CVE-2026-76202

creationtimestamp| type| source ---|---|--- 2026-09-09 11:49:09+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv3hs62yqe2t 2026-09-13 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvfzqtnhay2j...

security-field-notes

Security Field Notes Archived articles on network security re...

4 Questions to Ask When Evaluating an Exposure Management Platform

Executive Summary Exposure management platforms are increasingly evaluated based on post-detection actions rather than detection itself. This piece sets out four questions to ask when evaluating one: whether it narrows vulnerabilities to the exploitable using environment context rather than...

raptor v3.1.0

╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══██╗ ║ ║ ██║ ██║█...

Measuring the Security of the Evolving Software Supply Chain: A Research Agenda

Software supply chain security has become increasingly critical due to the widespread reliance on third-party dependencies and the growing attack surface of modern software ecosystems. However, existing quantitative, measurement-based analysis and vulnerability management approaches remain largel...

Do AI Coding Assistants Check Before They Install? A Pre-Registered Demand-Side Audit of Trust Signals in the Research Software Supply Chain

AI coding assistants now select, install, and configure software, and attackers have exploited that position through invented package names, compromised maintainer accounts, and manipulated repository text. In response, the supply-chain community publishes machine-checkable trust signals: softwar...

Joern 4.0.621

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

messari-crack

Messari MSR Crack 2026 Messari プレミアムをアンロック | リサーチハブ & インテルデータフィードへのアクセス 説明 Messari MSR Crack は、Messari のプレミアムリサーチハブとインテルデータフィードへのアクセスをアンロックするために設計されたプロフェッショナルなクラッキングユーティリティです。機関投資家向けの暗号通貨リサーチ、市場インテリジェンスレポート、リアルタイムデータフィードへの無制限アクセスを提供します。 主な利点 ✅ リサーチハブのアンロック — Messari のプレミアムリサーチライブラリへの完全アクセス ✅...

CVE-2024-36058

creationtimestamp| type| source ---|---|--- 2026-09-04 12:00:11+00:00| seen| https://t.me/GithubRedTeam/101065 2026-09-05 01:00:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/101065...

Conformal Prediction for Offensive Security

Despite its introduction more than a quarter century ago, Conformal Prediction CP has seen surprisingly few applications to the cyber security world thus far. In particular, we observe that, while CP has been employed as a defensive measure in many recent works, its use for carrying out attacks...