en
CVE-2026-11645: Chrome V8 Zero-Day — OOB Read/Write In-Browser RCE Analysis
Technical analysis of the Chrome V8 out-of-bounds read/write memory corruption zero-day exploited in targeted surveillance campaigns.
News
en
Microsoft June 2026 Patch Tuesday Deep Dive — YellowKey, GreenPlasma, CTFMON EoP & Record 200+ CVEs
Technical deep dive into Microsoft June 2026 Patch Tuesday addressing over 200 CVEs including YellowKey BitLocker bypass.
en
CVE-2026-35273: Oracle PeopleSoft Zero-Day — ShinyHunters UNC6240 Attack Chain & Remediation
How ShinyHunters weaponized an unauthenticated Oracle PeopleSoft zero-day to exfiltrate employee records across Fortune 500 firms.
en
Security Roundup: Netlogon 0-Click RCE, Citrix NetScaler SAML Exploit, TeamPCP Supply Chain, Android Zero-Day — Week of June 4, 2026
Weekly briefing: Windows Netlogon 0-click DC takeover, Citrix NetScaler SAML memory overread, and TeamPCP supply chain backdoor.
en
CVE-2025-48595: Android Framework Integer Overflow — Privilege Escalation and Stalkerware Chains
Technical root cause of the Android Framework integer overflow zero-day exploited in commercial surveillance spyware.
en
TeamPCP Supply Chain Attack: Trivy, KICS, and Bitwarden CLI Backdoors — Full Analysis
Full forensic analysis of the TeamPCP campaign: tag poisoning and entrypoint backdoors injected into Trivy, KICS, and Bitwarden CLI.
en
CVE-2026-3055: Citrix NetScaler SAML IDP Memory Overread — Technical Analysis & Remediation
Technical root cause and active exploitation telemetry for the Citrix NetScaler SAML session memory overread flaw.
en
CVE-2026-41089: Windows Netlogon 0-Click RCE — Domain Controller Exploitation Deep Dive
Technical breakdown of the 0-click unauthenticated remote code execution flaw in Windows Netlogon allowing Domain Controller takeover.
en
Security Roundup: Megalodon GitHub Attack, Ghost CMS Exploitation, MiniPlasma & YellowKey Windows 0-Days, DirtyDecrypt LPE — Week of May 28, 2026
Weekly briefing: Megalodon backdoors 5,500 GitHub repos, Ghost CMS SQLi hijacks 700 sites for ClickFix, and MiniPlasma Windows 0-day.
en
DirtyDecrypt PoC (CVE-2026-31635): Linux Kernel LPE via rxgk Missing COW Guard
Technical exploit breakdown of DirtyDecrypt: achieving local root privilege escalation via missing Copy-On-Write guards in Linux rxgk.
en
CVE-2026-45585 (YellowKey): BitLocker Bypass via FsTx + WinRE — Physical Access, No Credentials Needed
Technical root cause of YellowKey: bypassing BitLocker full-disk encryption via WinRE transaction replay without knowing user credentials.
en
MiniPlasma Windows 0-Day: SYSTEM Shell on Fully-Patched Windows 11 via cldflt.sys Race Condition
Exploit analysis of MiniPlasma: triggering a race condition in cldflt.sys to spawn NT AUTHORITY\SYSTEM shells on fully patched Windows 11.