Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Learning AD by Building a C2: Exploiting Constrained Delegation with emp3r0r ↗ (opens in a new tab)

  jm33_ng · Published 2026-09-09 · First collected 2026-10-24

• Hunting Vulnerabilities Using Frontier Models ↗ (opens in a new tab)

  Okta Security RSS Feed · Published 2026-09-08 · First collected 2026-10-24

• NVIDIA Jetson Linux Initrd Vulnerability Enables Secure Boot Bypass ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-09-03 · First collected 2026-10-24

• A Book on Windows Kernel Segment Heap ↗ (opens in a new tab)

  mrT4ntr4's Blog · Published 2026-08-31 · First collected 2026-10-24

• When it Snows it Pours – Anatomy of a ServiceNow Red Team ↗ (opens in a new tab)

  MDSec · Published 2026-08-28 · First collected 2026-10-24

• UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range ↗ (opens in a new tab)

  Boschko Security Blog · Published 2026-08-27 · First collected 2026-10-24

• What the DfE’s cyber security update means for multi-academy trusts ↗ (opens in a new tab)

  Heimdal Security Blog · Published 2026-08-24 · First collected 2026-10-24

• ZDI-CAN-31864: FreeBSD ↗ (opens in a new tab)

  ZDI: Upcoming Advisories · Published 2026-08-20 · First collected 2026-10-24

• Breaking secure boot without breaking the crypto ↗ (opens in a new tab)

  Low-level adventures · Published 2026-08-19 · First collected 2026-10-24

• From Detection to Measurable Risk Reduction: A Strategic Approach to Vulnerability Management ↗ (opens in a new tab)

  Art Resilia · Published 2026-08-19 · First collected 2026-10-24

• Analyzing Iranian-Russian UAV Touchpoints and Innovation ↗ (opens in a new tab)

  Margin Research · Published 2026-08-14 · First collected 2026-10-24

• Vulnerability Assessment vs. Penetration Testing ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-08-13 · First collected 2026-10-24

• From DEF CON Research to Automated Supply Chain Defense, finding npx confusion vulnerabilities with npxconfuse ↗ (opens in a new tab)

  Critical Thinking - Bug Bounty Podcast · Published 2026-08-11 · First collected 2026-10-24

• [Linux RDMA/rxe] From kref_get to root: exploitation of CVE-2026-64582 ↗ (opens in a new tab)

  nasm.re · Published 2026-08-06 · First collected 2026-10-24

• Exploiting Mali GPU via the Dirty Pagetable on a Pixel 7 Pro ↗ (opens in a new tab)

  Cyber Blog · Published 2026-08-05 · First collected 2026-10-24

• How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years ↗ (opens in a new tab)

  PortSwigger Blog · Published 2026-08-04 · First collected 2026-10-24

• Cheating Evolved: Breaking Locks in Gothic 1 Remake ↗ (opens in a new tab)

  erfur's Bits & Pieces · Published 2026-08-04 · First collected 2026-10-24

• [CONFERENCE] Pass the SALT 2026 ↗ (opens in a new tab)

  RandoriSec · Published 2026-07-31 · First collected 2026-10-24

• Adform compromised to serve crypto stealer via supply chain attack ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2026-07-30 · First collected 2026-10-24

• Apple Releases Security Updates Patching Nearly 200 Vulnerabilities Across macOS, iOS, iPadOS, and Safari ↗ (opens in a new tab)

  Cybersecurity News: Threats, Vulnerabilities & Privacy Updates - gHacks · Published 2026-07-29 · First collected 2026-10-24

• From Virtual Share to Physical Shell: Leveraging Windows’ Inconsistent Access Control for LPE ↗ (opens in a new tab)

  Exodus Intelligence · Published 2026-07-27 · First collected 2026-10-24

• Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-07-23 · First collected 2026-10-24

• Patching WP2Shell in the dark using PAI ↗ (opens in a new tab)

  Sicuranext Blog · Published 2026-07-21 · First collected 2026-10-24

• Industry reacts to Gold Eagle vulnerability management plan ↗ (opens in a new tab)

  Search Security Resources and Information from TechTarget · Published 2026-07-17 · First collected 2026-10-24

• Fit for Detection: Hunting U-Boot Vulnerabilities at Scale ↗ (opens in a new tab)

  Binarly Research · Published 2026-07-16 · First collected 2026-10-24

• Memory Safety by Default is Non-Negotiable ↗ (opens in a new tab)

  lander's posts · Published 2026-07-14 · First collected 2026-10-24

• SensePost’s 2026 Artwork ↗ (opens in a new tab)

  :: Orange Cyberdefense :: on Orange Cyberdefense · Published 2026-07-08 · First collected 2026-10-24

• Vulnerabilities of Realtek SD card reader driver, part2 ↗ (opens in a new tab)

  ZwClose · Published 2026-07-08 · First collected 2026-10-24

• FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 2 of 2) ↗ (opens in a new tab)

  Blog - Praetorian · Published 2026-07-06 · First collected 2026-10-24

• What are Hardware Private Cubic Circuits? ↗ (opens in a new tab)

  frereit's blog · Published 2026-07-04 · First collected 2026-10-24