Technology ❯ Cybersecurity

Research

Security Research Security Researchers Vulnerability Disclosure Vulnerability Research Rapid7 Proof of Concept Malware Analysis Threat Intelligence Vulnerabilities Security Firms

Attackers Spoof OAuth Client IDs to Evade Microsoft Entra Sign-In Logs

Proofpoint’s analysis shows the tactic lets unauthenticated actors confirm valid credentials by reading Entra error responses.

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

Cursor Patches DuneSlide Flaws That Let Prompts Break Its Sandbox

Citrix Patches Six NetScaler Flaws Including High-Severity SAML Memory Bug

Researchers Find macOS Chain Letting Standard Users Disable EDR and MDM

Unpatchable BootROM Flaw Found in Apple A12 and A13 Chips

Unpatchable 'usbliter8' Exploit Breaks BootROM on Apple A12 and A13 Chips

Microsoft Confirms RoguePlanet Defender Zero-Day and Says Patch Is Being Developed

FBI’s Kinetic Cyber Range Revealed: a 22,000‑Square‑Foot Mock Town for Live Cybertraining

GreatXML Exploit Bypasses BitLocker by Abusing WinRE XML Files

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

Microsoft Issues Record Patch Tuesday With More Than 200 Vulnerabilities

Researchers Show AI-Powered Worm That Adapts and Runs on Infected Machines

Researchers Demonstrate AI‑Driven Worm That Adapts and Self‑Propagates in Lab Tests

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Belgium Says Critical Windows Netlogon Flaw Is Being Actively Exploited

Critical Zero-Day in Gogs Lets Authenticated Users Run Remote Code

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

Researcher’s Exploits Revive MiniPlasma Bug and Flag BitLocker Bypass in Windows

Hackers Exploit Critical 'Nginx Rift' Bug as Fixes Ship