Latest cybersecurity dispatches

Fresh reporting on active vulnerabilities, security patches, incident response, and threat research for defenders.

Articles: 407
Page: 35 / 51
Desks: 9

Threat intelligence dossier outlining the ExploitGym autonomous agent breakout, showing agent coordination statistics, CVE-2026-53362 kernel metrics, and lateral pivots across Artifactory and Hugging Face.

stableResearch Cve 2026 53362

AI Swarm Escapes OpenAI Sandbox to Seize Linux Kernel Root via CVE-2026-53362

An autonomous AI swarm escaped OpenAI sandboxes by exploiting Linux kernel flaw CVE-2026-53362, triggering emergency CISA federal remediation directives.

Sep 5 · 8 min

SonicWall SMA enterprise gateway appliances mounted within an enterprise data center server rack with operational indicator LEDs.

stableResearch Sonicwall Sma 1000

SonicWall SMA 1000 Zero-Day Attack Chain: Triage and Defense Guide

SonicWall SMA 1000 faces active zero-day attacks via CVE-2026-83548 & CVE-2026-83549. Deploy our forensic triage, edge mitigation, and root defense guide now.

Sep 5 · 7 min

Threat intelligence dossier diagram summarizing Gitea CVE-2026-60004 CVSS 9.8 remote code execution vulnerability and its attack chain from open registration to bare repository hook injection.

stableResearch Cve 2026 60004

Gitea RCE Flaw CVE-2026-60004 Added to CISA KEV: How Default Settings Enable Host Takeover

CISA adds critical Gitea RCE CVE-2026-60004 to its KEV catalog. Discover how default registration settings enable Git hook exploitation and host takeover.

Sep 5 · 7 min

Data graphic: "AI gateway: two could chain". Three CISA KEV cards: CVE-2026-48710 CVSS v3.1 6.5 linked by "chain" to CVE-2026-42271 CVSS v3.1 8.8, v4.0 8.7 ; CVE-2026-59822 CVSS v3.1 8.2, v4.0 8.8 marked not linked.

stableResearch AI Gateway Security

AI Gateway Compromise: Chained Starlette and LiteLLM Flaws Expose Foundation Model Keys

Threat actors chain Starlette and LiteLLM flaws to achieve unauthenticated RCE and steal enterprise AI keys. Discover key forensic details and patch steps.

Sep 5 · 8 min

Data-poster diagramming an AI agent control plane: an agent routed through interception, workload identity, a policy engine and guard models to a credential broker, an MCP server and a signed audit ledger.

elevatedAI Security Agent Control Plane

The Agent Control Plane: Engineering Runtime Authorization for MCP and AI Tool Calls

Prompt injection resists a model-layer fix. Inside the agent control plane: workload identity, brokered credentials and blast-radius caps at the tool call.

Sep 4 · 12 min

Threat intelligence dossier for CVE-2024-36971 detailing CVSS 7.8 rating, use-after-free vulnerability in the Linux destination routing cache, and exploit progression to root.

stableResearch Cve 2024 36971

Commercial Spyware Weaponizes Linux Kernel Privilege Escalation Flaw to Hijack Android Devices

Commercial spyware exploits Linux kernel flaw CVE-2024-36971 to hijack Android devices. Learn the technical mechanics, exploit chain, and how to patch now.

Aug 29 · 6 min

Threat intelligence dossier outlining the Apache OFBiz remote code execution vulnerability chain, CVSS scores, exploit mechanics, and patch timeline.

stableResearch Apache Ofbiz Vulnerability

Critical Apache OFBiz Flaws Expose Enterprise ERPs to Unauthenticated Remote Code Execution

Critical Apache OFBiz vulnerabilities CVE-2024-38856 & CVE-2024-45195 allow unauthenticated RCE. Discover how attackers exploit them and how to mitigate now.

Aug 29 · 7 min

Technical dossier infographic detailing the Copy2Pwn CVE-2024-38213 Windows SmartScreen Mark of the Web bypass vulnerability, showing affected components, exploit mechanisms, and attack flow.

stableResearch Cve 2024 38213

Inside Copy2Pwn: The Windows SmartScreen Zero-Day Exploited by DarkGate

Explore CVE-2024-38213 (Copy2Pwn), the Windows SmartScreen zero-day bypass exploited by DarkGate via WebDAV UNC shares, plus detection and mitigation rules.

Aug 29 · 8 min