News · r/netsec
-
r/netsec
Scanning 7.25 Million Public Repositories on China's Largest Git Platform for Secrets
r/netsec · mongodb.com
-
r/netsec
SEO Poisoning Campaign Targets DeepSeek Users: Chinese Threat Actor Deploys Kong RAT via Multi-Stage Attacks
r/netsec · hybrid-analysis.blogspot.com
-
r/netsec
Where a million-request-a-second HTTP/2 flood goes: XDP drop counters from two real attacks
r/netsec · shieldify.ee
-
r/netsec
A malicious game server can crash the Godot clients that join it
r/netsec · axeghost.offprint.app
-
r/netsec
New Kerberos Abuse Path Discovery - Constrained Delegation without Protocol Transition against SPN-less accounts
r/netsec · hunio.org
-
r/netsec
The Gentlemen: A closer look at a not-so-gentle ransomware-as-a-service operation
r/netsec · acronis.com
-
r/netsec
I've proven that you don't need quotes or parentheses in JavaScript
r/netsec · blog.ikaes.de
-
r/netsec
A community translation can run attacker-chosen code in an exported Godot game
r/netsec · axeghost.offprint.app
-
r/netsec
The AI RCEssion: Why AI-driven security is calling in decades of software tech debt
r/netsec · blog.tedivm.com
-
r/netsec
Full source release: autonomous root chain for TCL 50C721 Android TV via CVE-2022-22706 (Mali GPU page-cache write)
r/netsec · gitlab.com
CVE-2022-22706 -
r/netsec
Cloudflare's new PQ GeoKey Manager: keys that can only unwrap inside a chosen region, wrapped with hybrid ML-KEM + X25519
r/netsec · blog.cloudflare.com
-
r/netsec
Imperia CMS SiteActive TEMPLATE Unauthenticated SSTI Remote Code Execution (CVE-2026-110355)
r/netsec · rcesecurity.com
CVE-2026-110355 -
r/netsec
Introducing pathrunner: An AWS privilege escalation framework
r/netsec · securitylabs.datadoghq.com
-
r/netsec
Incident Response and Threat Landscape Report: Critical Infrastructure Vulnerabilities and Extortion Tactics
r/netsec · kylesinvestigation.com
-
r/netsec
Exclusive: FoxIO researcher says Bun never answered its May report of a server-crashing HTTP/3 flaw
r/netsec · runtimewire.com
-
r/netsec
CVE-2026-94300: Concurrent GSS-TSIG messages corrupt memory
r/netsec · kb.isc.org
CVE-2026-94300 -
r/netsec
Markdown Is the New Executable: Attackers Are Dropping Agent Instructions Into Your Downloads Folder From the Web
r/netsec · forever.security
-
r/netsec
Operation IXIM: Preventing a botnet of millions of Popcorn Time users
r/netsec · labs.eye.security
-
r/netsec
The PHP Foundation: Today's PHP Security Release, and How We're Strengthening PHP Security
r/netsec · thephp.foundation
-
r/netsec
PHP Just Patched Two Critical Remote Code Execution Flaws. Update Now.
r/netsec · kylesinvestigation.com
-
r/netsec
CVE-2026-109618 and CVE-2026-109619 Are Two Directions Through the Same Pre-RINIT Window
r/netsec · nefariousplan.com
CVE-2026-109618, CVE-2026-109619 -
r/netsec
PHP2Shell (CVE-2026-109618/109619): first exploit requests arrived 5.5 hours before PHP shipped the fix, and the "scanners" carry Mirai-style loaders
r/netsec · ellio.tech
CVE-2026-109618 -
r/netsec
What the PHP2Shell rumors got wrong, from inside the PHP security team
r/netsec · daubois.dev
-
r/netsec
uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps
r/netsec · 0x0v1.com
-
r/netsec
CVE-2026-46633: Proving exploitability of Twig sandbox bypass
r/netsec · gist.github.com
CVE-2026-46633
