TITAN LAYERA flaw in OpenAI's compaction process may allow researchers to transfer reasoning traces between models, potentially enabling the development of cheaper AI alternatives in China.
Kali Linux has released version 2026.3, featuring six new hacking tools, desktop environment improvements, and more. This update aims to enhance user experience and streamline security tasks.
The CVE-2026-102870 vulnerability in ASP.NET Core allows remote code execution, posing risks to affected systems. It is crucial for developers and organizations to apply patches immediately.
A critical remote code execution vulnerability has been identified in ASP.NET Core, requiring immediate attention from developers and system administrators.
A critical vulnerability has been identified in ASP.NET Core, allowing authorized attackers to elevate their privileges locally. It is vital for organizations to implement necessary patches to mitigate this risk.
The CVE-2026-111497 vulnerability allows unauthorized attackers to elevate privileges over a network by exploiting an out-of-bounds write in .NET.
Dutch authorities have arrested two individuals linked to NFC relay attacks that resulted in the theft of over $400,000 from unsuspecting bank account holders. The suspects used social engineering tactics to manipulate victims into installing malicious applications.
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers.
CVE-2026-83862 reveals a critical remote code execution vulnerability in Windows Network Load Balancing, with a CVSS score adjusted from 9.8 to 8.8, requiring Layer 2 network adjacency for exploitation.
CVE-2026-102208 is a critical vulnerability in the Windows Win32 Kernel Subsystem that allows attackers to elevate their privileges. Microsoft has released an update to address this issue.
Hackers compromised the LiteLLM project's PyPI package and published malicious Docker images with a payload that steals credentials, secrets, and environment variables.
A critical vulnerability has been identified in Azure Kubernetes Configuration Service, allowing unauthorized attackers to elevate privileges over a network. Immediate attention is required from organizations to prevent potential security breaches.
A critical vulnerability in VM Inspector for Azure Virtual Machines allows unauthorized attackers to elevate privileges over a network, posing significant risks to organizations. Immediate patching is essential.