en
CVE-2026-11645: Chrome V8 Zero-Day — OOB Read/Write In-Browser RCE Analysis
Technical analysis of the Chrome V8 out-of-bounds read/write memory corruption zero-day exploited in targeted surveillance campaigns.
James Luther
es
CVE-2026-11645: Chrome V8 Día Cero — OOB Read/Write In-Browser RCE Analysis
Análisis técnico del Chrome V8 fuera de límites leer / escribir corrupción de memoria de cero días explotado en campañas de vigilancia orientadas.
en
Microsoft June 2026 Patch Tuesday Deep Dive — YellowKey, GreenPlasma, CTFMON EoP & Record 200+ CVEs
Technical deep dive into Microsoft June 2026 Patch Tuesday addressing over 200 CVEs including YellowKey BitLocker bypass.
es
Microsoft June 2026 Patch Martes Profund Dive — YellowKey, GreenPlasma, CTFMON EoP > Record 200+ CVEs
Inmersión técnica profunda en Microsoft June 2026 Patch Martes abordando más de 200 CVEs incluyendo AmarilloKey BitLocker bypass.
en
CVE-2026-35273: Oracle PeopleSoft Zero-Day — ShinyHunters UNC6240 Attack Chain & Remediation
How ShinyHunters weaponized an unauthenticated Oracle PeopleSoft zero-day to exfiltrate employee records across Fortune 500 firms.
es
CVE-2026-35273: Oracle PeopleSoft Día Cero — ShinyHunters UNC6240 Attack Chain & Remediation
Cómo ShinyHunters armó a un Oracle PeopleSoft de cero días para exfiltar registros de empleados en las firmas Fortune 500.
en
Security Roundup: Netlogon 0-Click RCE, Citrix NetScaler SAML Exploit, TeamPCP Supply Chain, Android Zero-Day — Week of June 4, 2026
Weekly briefing: Windows Netlogon 0-click DC takeover, Citrix NetScaler SAML memory overread, and TeamPCP supply chain backdoor.
es
Redonda de seguridad: Netlogon 0-Click RCE, Citrix NetScaler SAML Exploit, TeamPCP Supply Chain, Android Día Cero — Semana del 4 de junio de 2026
Reunión informativa semanal: Windows Netlogon 0-click CC takeover, Citrix NetScaler SAML memoria overread, y TeamPCP cadena de suministro backdoor.
en
TeamPCP Supply Chain Attack: Trivy, KICS, and Bitwarden CLI Backdoors — Full Analysis
Full forensic analysis of the TeamPCP campaign: tag poisoning and entrypoint backdoors injected into Trivy, KICS, and Bitwarden CLI.
en
CVE-2025-48595: Android Framework Integer Overflow — Privilege Escalation and Stalkerware Chains
Technical root cause of the Android Framework integer overflow zero-day exploited in commercial surveillance spyware.
es
TeamPCP Supply Chain Attack: Trivy, KICS, and Bitwarden CLI Backdoors — Full Analysis
Análisis forense completo de la campaña TeamPCP: envenenamiento de etiquetas y backdoors de punto de entrada inyectados en Trivy, KICS y Bitwarden CLI.
es
CVE-2025-48595: Android Framework Integer Overflow — Privilege Escalation and Stalkerware Chains
Causa de raíz técnica del entero Android Framework desbordamiento de cero días explotado en spyware de vigilancia comercial.