0-Day Alerts
⚡️ 0-Day Alert: Node.js, PyPI, .NET, and others
The bug is now in active exploitation
Discussions
📌 Q&A
Place to ask questions and discuss topics that don't belong under other posts.
0-Day Insights
🐞 0-Day Insights: PHP RCE (PHP2Shell)
Independent analysis of PHP CVE-2026-109618 and CVE-2026-109619 from first principles: patch reverse engineering and RCA.
0-Day Alerts
⚡️ 0-Day Alert: Apple CoreGraphics RCE exploited in targeted attacks
Update iOS/iPadOS and macOS.
0-Day Alerts
⚡️ 0-Day Alert: Chrome v8 RCE
Update Chrome to 153.0.8010.36/.37
0-Day Alerts
⚡️ 0-Day Alert: Chrome v8 RCE
Update Chrome to 152.0.7977.82/.83
0-Day Alerts
⚡️ 0-Day Alert: IBM LangFlow OSS RCE
LangFlow deployments have been under active exploitation since May.
0-Day Alerts
⚡️ 0-Day Alert: VMware ESXi + vCenter
VMware just released a critical security update for ESXi hypervisor suite (VMSA-2026-0006). Two attack vectors.
0-Day Alerts
⚡️ 0-Day Alert: Google Chrome GPU Remote to Elevation of Privilege exploit in the wild
Update Chrome to 146.0.7680.177/178
0-Day Alerts
⚡️ 0-Day Alert: Google Chrome RCE + EoP in the wild
Update Chrome to 146.0.7680.80
0-Day Alerts
⚡️ 0-Day Alert: Android Qualcomm msm kernel - exploit in-the-wild since December 2025.
CVE-2026-21385: kgsl msm kernel exploited in the wild
0-Day Alerts
⚡️ 0-Day Alert: Dell RecoverPoint for Virtual Machines exploited in-the-wild
CVE-2026-22769 (CVSS 10.0) allows remote unauthorized access with root privileges - exploited in the wild