All articles

31 published articles · search, filter and sort as you wish.

Orden

Showing 5 of 5 articles

Microsoft removes GitHub account of researcher who publicly dropped zero-days without coordinated disclosure, then publicly endorses CVD.

Document timestamps and vendor responses before publishing any zero-day.
Use neutral platforms for disclosure if the vendor ignores your 90-day window.
Review GitHub's Acceptable Use Policy before publishing Microsoft vuln research.

Microsoft issued an out-of-band SharePoint patch, signaling active exploitation or critical severity outside the normal Patch Tuesday cycle.

Public PoC released for CVE-2026-31635 (DirtyDecrypt), a Linux kernel local privilege escalation flaw discovered by Zellic and V12.

Newsletter

Elige las ramas que quieres recibir. Cancela cuando quieras.

1 email

/día

4 ramas

a elegir

20:00

CET

Microsoft patches CVE-2026-45659 in SharePoint Server — RCE via untrusted data deserialization, CVSS 8.8, no special attack conditions required.

CVE-2026-34926, a directory traversal zero-day in TrendAI Apex One on-premise, is being actively exploited in the wild; patch is available.