Vulnerabilities

The flaws, the patches and the race between them.

  • 4 Subtopics
  • 15 Tracked terms
  • Last 30 days Feed window
Search within this topic Ask AI about this topic All topics

Inside Vulnerabilities

Zero-Days Exploited before the patch exists. Patch Now The CVEs that cannot wait. Research and Disclosure The researchers finding the holes. Supply Chain Flaws Compromised packages and vendor risk.

Where the coverage comes from

The 50 sources publishing most on Vulnerabilities over the last 30 days, out of 2,829 articles in the feed. Click a source for its articles on this topic and its profile.

  1. 1 @Thepracticaldev dev.to 198 articles 2+ hour ago 97%
  2. 2 Cybersecuritynews cybersecuritynews.com 182 articles 2+ day ago 0%
  3. 3 gbhackers.com 112 articles 2+ day ago 25%
  4. 4 cyberpress.org 100 articles 2+ day ago 2%
  5. 5 The Hacker News thehackernews.com 95 articles 1+ day ago 9%
  6. 6 Medium medium.com 88 articles 3+ hour ago 69%
  7. 7 @Securityweek securityweek.com 78 articles 1+ day ago 92%
  8. 8 Bleepingcomputer bleepingcomputer.com 56 articles 2+ day ago 91%
  9. 9 4Sysops 4sysops.com 47 articles 7+ hour ago 55%
  10. 10 Security Affairs securityaffairs.com 33 articles 2+ day ago 97%
  11. 11 Forkast forkast.news 31 articles 15+ hour ago 97%
  12. 12 Cso Online csoonline.com 30 articles 2+ day ago 100%

In the feed right now

Tags
People
Places
Organizations

What this topic collects on

An article joins this feed when it matches these terms. Each one is also a search of its own.

Latest in Vulnerabilities

@phoronix
phoronix.com > news > EROFS-Disabled-LZ4-Rolling

EROFS Disables LZ4 Rolling Decompression Due To Data Corruption Possibility

1+ hour, 33+ min ago   (196+ words) The EROFS read-only file-system popular for embedded systems, containers, and other use-cases has resorted to temporarily disabling its LZ4 rolling decompression support due to data corruption concerns... - Categories Computers Display Drivers Graphics Cards Linux Gaming Memory Motherboards Processors Software Storage Operating…...

blockchain.news
blockchain.news > news > codeql-2-26-4-github-actions-security

CodeQL 2.26.4 Enhances GitHub Actions Security, Adds Go 1.27 Support

1+ week, 2+ day ago   (295+ words) Joerg Hiller Sep 03, 2026 15:43 GitHub's CodeQL 2.26.4 boosts security for GitHub Actions, improves Rust alerts, and extends support to Go 1.27. Key update for developers. GitHub Actions: Security checks for GitHub Actions have been fine-tuned. Specifically, the update enhances detection for mutable references…...

DEV Community
dev.to > tinycoder-studio > i-found-an-undocumented-mcp-server-on-opensea-and-it-leaked-usernames-for-any-wallet-5935

I Found an Undocumented MCP Server on OpenSea — and It Leaked Usernames for Any Wallet

2+ hour, 12+ min ago   (492+ words) TL;DR: OpenSea runs an undocumented MCP server at mcp.opensea.io/mcp. One of its tools hands out API keys to anyone who asks, and another lets you resolve any Ethereum address with an OpenSea profile to its owner's…...

Yahoo Finance
finance.yahoo.com > technology > ai > articles > automox-launches-ai-speed-cybersecurity-130000595.html

Automox Launches AI-Speed Cybersecurity Vulnerability Mitigation Pipeline to Reduce Exposure for Unpatchable Vulnerabilities

2+ day, 20+ hour ago   (295+ words) AI-powered Automox Worklet™ generation closes the time window between AI-speed cybersecurity vulnerability disclosure and exposure mitigation: built to mitigate at AI speed, vetted by humans, turning vulnerabilities into verified endpoint action even when a patch isn't the immediate fix. These…...

thehackernews.com
thehackernews.com > 2026 > 09 > your-critical-vulnerabilities-might-not.html

Your Critical Vulnerabilities Might Not Be Your Biggest Risk

1+ day, 10+ hour ago   (1309+ words) Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually create a path to compromise. A critical vulnerability may look alarming on a…...

DEV Community
dev.to > excalibra > droid-asc-a-high-performance-tool-for-android-reverse-engineering-and-vulnerability-discovery-1ci9

Droid ASC: A High-Performance Tool for Android Reverse Engineering and Vulnerability Discovery

4+ hour, 36+ min ago   (309+ words) Article Summary: Droid ASC is a high-performance tool for Android reverse engineering and mobile... Tagged with android, cybersecurity, security, vulnerabilities....

DEV Community
dev.to > najeebullah > the-net-http-failure-nobody-sees-coming-najeeb-ullah-3g45

The.NET HTTP Failure Nobody Sees Coming -Najeeb Ullah

5+ hour, 31+ min ago   (1235+ words) Your CPU is fine. Your memory is fine. Your database is fine. So why did the application suddenly stop calling another service? There is a class of production failure that is particularly dangerous because your application metrics can look completely…...

Medium
medium.com > @tanvir.infosec > http-request-smuggling-the-complete-guide-0a9a1d2d1c9f

HTTP Request Smuggling: The Complete Guide

3+ hour, 1+ min ago   (1050+ words) Every Method, Technique, Bypass, and Defense You Need to Know HTTP Request Smuggling also known as HTTP Desync or HTTP Header Smuggling is one of the most …...

4sysops
4sysops.com > archives > dutch-ncsc-says-check-point-vpn-flaw-exploitation-is-imminent

Dutch NCSC says Check Point VPN flaw exploitation is imminent – 4sysops

7+ hour, 38+ min ago   (25+ words) The Dutch NCSC now expects attackers to target two critical Check Point VPN flaws soon, despite no public proof-of-concept exploit. The warning raises the urgen...

BIOENGINEER.ORG
bioengineer.org > machine-learning-map-reveals-hidden-paralog-vulnerabilities-across-1005-cancer-cell-lines

Machine Learning Map Reveals Hidden Paralog Vulnerabilities Across 1,005

4+ hour, 40+ min ago   (613+ words) Cancer cells are masters of redundancy, and one of their most effective tricks is hiding lethal weaknesses behind duplicate genes....