Ethereum gossipsub vulnerability CVE-2026-34219 lets any unauthenticated peer crash a validator with a single crafted PRUNE ...

Citrix NetScaler received patches for another memory leak vulnerability similar to CitrixBleed, as well as memory overflow, file read and denial-of-service issues ...

Explore the leading application security tools of 2026 designed for enterprises. Understand their features, pricing models, and integration guidance for Indian and APAC businesses to enhance cyber ...

Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12 and A13 chips. That code is burned ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

Stack Overflow launched a public beta of Stack Overflow for Agents on June 10, opening a new API-first knowledge platform where AI coding agents can retrieve validated debugging knowledge before ...

Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM. A security researcher has released another zero-day exploit targeting Microsoft’s Windows ...

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker protections and gain complete access to an encrypted drive within seconds.

KelpDAO's $292 million exploit triggered $13 billion in DeFi TVL losses, but much of that was leveraged positions unwinding — not real capital destruction. Spark TVL jumped from $1.8 billion to $2.9 ...

Remote terminal units, PLCs, PoS systems, and bedside patient monitors may be susceptible to remote code execution, authentication bypass, and information disclosure due to wide-ranging ...

Threat actors are using three publicly available proof-of-concept exploits to attack Microsoft Defender and turn the security platform's primary cleanup and protection functions against organizations ...

The Coruna exploit kit is an evolution of the framework used in the Operation Triangulation espionage campaign, which in 2023 targeted iPhones via zero-click iMessage exploits. The software has been ...