Install
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Bitcoin Lightning Development Kit v0.2.6 Fixes Fund Theft and Restart Bugs
7+ hour, 59+ min ago (333+ words) Lightning Development Kit, a toolkit for building Bitcoin Lightning applications, released v0.2.6 on Sept. 9 with fixes for bugs that could divert small amounts of a node’s funds or prevent saved channel state from loading. LDK packages a Lightning implementation as a…...
Dell Secure Connect Gateway Vulnerability: 3 Critical CVEs (CVSS 9.8)
2+ hour, 12+ min ago (27+ words) Let Hackers Forge Admin Access Most enterprise security teams pour their energy into hardening customer-facing apps — and …...
Three Patches, Zero Progress: ShieldCrash Exposes the Endpoint-Protection Plane as Microsoft’s Latest Attack Surface
14+ hour, 59+ min ago (591+ words) Nightmare Eclipse published a proof-of-concept on GitHub on September 9, 2026. The exploit reads arbitrary files as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server systems running the September 2026 security updates. It is the third consecutive bypass of the same component…...
GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read - Exploited Within 24 Hours
11+ hour, 45+ min ago (543+ words) Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons The AI Supply Chain Has a Security Problem, and Much of It Is Sitting…...
Hacking VaultGate: Three Paths to One Flag
12+ hour, 58+ min ago (1142+ words) A walkthrough of four ways into a deliberately vulnerable web app — and how to fix each one. Tagged with security, cybersecurity, hacking, tutorial....
FudModule Rootkit Hides 5 Weeks via CVE-2026-68820
20+ hour, 39+ min ago (300+ words) Lazarus has steadily upgraded FudModule’s delivery mechanism over four years, and the trajectory tells its own story about how APT groups adapt to defender countermeasures. FudModule is the most documented example of an “EDR-killer” rootkit, but it sits inside a…...
The Chain That Opened the Crisis: How SonicWall SMA1000’s First Zero-Day Turned VPN Appliances Into MFA Harvesting Machines
14+ hour, 11+ min ago (129+ words) CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first…...
Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited
16+ hour, 11+ min ago (1419+ words) Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Zero trust AI agents demand a different kind of security In this interview, Chris Webber, VP, Product Marketing at Teleport, explains why zero trust principles…...
Your CI Cache Can Carry Malicious Code. GitHub Just Added New Controls.
16+ hour, 4+ min ago (20+ words) GitHub Actions now supports cache-mode for least-privilege cache access. Learn how read, write, write-only, and none reduce CI cache-poisoning risk....
Check Point VPN CVE-2026-85102 and CVE-2026-85103: Early Warning for Pre-Authentication RCE
21+ hour, 35+ min ago (1541+ words) 1. Basic Information Original Title: Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent Source: BleepingComputer, Dutch NCSC, Check Point Published Date: 2026-09-12 Severity: High Basis for Severity: Both CVSS 9.8 vulnerabilities allow unauthenticated remote code execution. Although the reference materials do…...