Security

1 Articles

Log4j Deserialization Bypass Is Real but Not Log4Shell

A security researcher using the handle U-Sec (Wujie Security) published details of a deserialization filter bypass in Apache Log4j 2, reporting that…

Apple —— Aug 18, 2026 10 min read

Apple shipped four security updates on August 17, 2026, fixing 122 vulnerabilities in iOS 18.7.10 and…

AI —— Aug 17, 2026 2 min read

Wiz Research’s autonomous “Red Agent” found and exploited a script injection flaw in Snowflake’s public snowflake-connector-net…

Microsoft —— Aug 16, 2026 4 min read

Security researcher Omri Baso has disclosed a remote code execution chain in Microsoft Configuration Manager (SCCM/ConfigMgr)…

Apple —— Aug 14, 2026 14 min read

Apple sent a fresh round of mercenary spyware threat notifications to users in 110 countries on…

Crypto Currency —— Aug 13, 2026 2 min read

Nearly 14,000 people who bought a Trezor hardware wallet this summer now have their names and…

Microsoft —— Aug 13, 2026 2 min read

Rapid7 and Microsoft have disclosed CVE-2026-63520, a remote code execution flaw in Microsoft SharePoint that completes…

Data Breached —— Aug 13, 2026 8 min read

Two threat intelligence firms have published victim data from the March 2026 LiteLLM supply chain attack,…

Microsoft —— Aug 12, 2026 3 min read

Security researcher Nightmare Eclipse has released ShieldBreak, a proof-of-concept exploit that defeats the patch Microsoft shipped…

Microsoft —— Aug 11, 2026 6 min read

Three weeks before Microsoft makes passkeys the default sign-in method for Entra ID, new research shows…