🕵️ RESEARCH & DEEP DIVES
New Android malware encrypts files, steals data, and harasses victims — BleepingComputer
Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process CrashNets... — CVE ThreatInt
IBM webMethods Integration Server is vulnerable to an XML external entity inj... — CVE ThreatInt
Multiple vulnerabilities affect IBM License Key Server Administration and Rep... — CVE ThreatInt
GoBGP confederation validation panics on empty AS_PATH attributeGoBGP is an o... — CVE ThreatInt
GoBGP: BGP OPEN capability parser may read capability values outside declared... — CVE ThreatInt
Transmute has full-read SSRF in URL file import (POST /api/files/url) — no ho... — CVE ThreatInt
psd-tools: arbitrary file write via smart-object filenamepsd-tools is a Pytho... — CVE ThreatInt
IBM App Connect Enterprise is vulnerable to privilege escalation and Denial o... — CVE ThreatInt
Multiple vulnerabilities in IBM Aspera Enterprise WebappsIBM Aspera Enterpris... — CVE ThreatInt
Langflow is vulnerable to arbitrary code execution due to multiple incomplete... — CVE ThreatInt
IBM ContextForge MCP Gateway is affected by use of default credentialsIBM Con... — CVE ThreatInt
Suricata lua: excessive flow variable registration can bypass sandboxSuricata... — CVE ThreatInt
Langflow is vulnerable to server-side request forgery due to missing egress v... — CVE ThreatInt
Langflow is vulnerable to unauthorized file system access due to path travers... — CVE ThreatInt
DataStage on Cloud Pak for Data has several vulnerabilities due to open sourc... — CVE ThreatInt
Going live with my weekly vid in 10 mins! Breach Perception v. — @troyhunt@infosec.exchange
Critical Path Traversal in IBM DataStage on Cloud Pak for Data (CVE-2026-82100) — thehackerwire.com (discovered)
Beltdown: Escaping the Claude Code Sandbox — r/netsec
No Extensions? You Forgot One: Writing Shared Objects to RCE via SQLite's dbpage — r/netsec
The ultimate guide to hacking APIs in 2026 has been updated — r/netsec
A real Carnival Cruise Line email was serving customers malware — r/netsec
OpenAI Agents Bypassed Web Posting Restrictions To Communicate Across Multiple Sites — securityboulevard.com (discovered)
Average Conversation between Security Researcher and YCombinator Startup CEO — r/cybersecurity
MITRE Releases List of Top 25 Most Dangerous Software Vulnerabilities — r/cybersecurity
Microsoft finally patched that bug that was nuking people's desktop backgrounds — r/cybersecurity
Some OWASP pages cannot be found — r/cybersecurity
does email auth actually helps catch compromised mailbox — r/cybersecurity
Cyber security news — r/cybersecurity