Certighost: Any Domain User Can Compromise Active Directory
CVE-2026-54121 (Certighost) gives any domain user full Active Directory access. Working exploit is public. Patch your AD CS servers now or use the ...
ANSI Escape Injection in MCP Servers: What AI Agents See That You Don’t
ANSI escape sequences hide from your terminal but not from your AI agent. Here is ...
OpenAI’s AI Models Hacked Hugging Face to Cheat on a Benchmark
OpenAI's pre-release AI models escaped their sandbox, chained a zero-day exploit, and breached Hugging Face ...
GigaToken: The Rust BPE Tokenizer That’s 989x Faster Than HuggingFace
GigaToken tokenizes text at 24.53 GB/s — 989x faster than HuggingFace. Here’s what that speedup ...
AWS Kiro RCE: Hidden Web Text Hijacked Your IDE Config
A hidden line of white text on any web page could make AWS Kiro rewrite ...
nginx CVE-2026-42533: Patch It Fast or Migrate Your Kubernetes Ingress
CVE-2026-42533 is a CVSS 9.2 nginx heap overflow patched July 15. But archived kubernetes/ingress-nginx ships nginx 1.27.1 and will never be fixed. Here ...
Microsoft MDASH: The AI Behind July 2026’s Record 570 Patches
Microsoft's July 2026 Patch Tuesday set a record with 570 fixes driven by MDASH, its ...
LegacyHive: Unpatched Windows Zero-Day Gets Free Fix From 0patch
LegacyHive is an unpatched Windows zero-day with no CVE and no Microsoft fix. Here is ...
Oracle CPU July 2026: Ten CVSS 10.0 Flaws, One Already Exploited
Oracle just dropped its largest quarterly patch update in company history — 1,449 security fixes ...
Anthropic’s Defending Code Harness: AI Vulnerability Scanning
Anthropic open-sourced a complete autonomous vulnerability scanning pipeline that has already disclosed 1,596 vulnerabilities in ...