Pwn2Own Berlin 2026, Day Three: DEVCORE Crowned Master of Pwn, $1.298 Million Total
Pwn2Own Berlin 2026, Day Three: DEVCORE Crowned Master of Pwn, $1.298 Million Total Pierluigi Paganini May 17, 2026 Pwn2Own Berlin 2026 ended with 47 zero-days…
Category: Securityaffairs
U.S. CISA adds a flaw in Microsoft Exchange Server to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Microsoft Exchange Server to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 16, 2026 The U.S. Cybersecurity and Infrastructure…
OpenAI hit by supply chain attack linked to malicious TanStack packages
OpenAI hit by supply chain attack linked to malicious TanStack packages Pierluigi Paganini May 16, 2026 OpenAI said the TanStack supply chain attack compromised two…
NGINX Rift: an 18-year-old flaw in the world’s most deployed web server just came to light
NGINX Rift: an 18-year-old flaw in the world’s most deployed web server just came to light Pierluigi Paganini May 14, 2026 Researchers found a critical…
Pwn2Own Berlin 2026, Day Two: $385,750 more, Microsoft Exchange falls, and the running total crosses $900K
Pwn2Own Berlin 2026, Day Two: $385,750 more, Microsoft Exchange falls, and the running total crosses $900K Pierluigi Paganini May 15, 2026 Day two of Pwn2Own…
Pwn2Own Berlin 2026, Day One: $523,000 paid out, AI products fall
Pwn2Own Berlin 2026, Day One: $523,000 paid out, AI products fall Pierluigi Paganini May 15, 2026 Pwn2Own Berlin 2026 day one saw 22 entries and…
CVE-2026-42897: Microsoft confirms active exploitation of Exchange Server zero-day
CVE-2026-42897: Microsoft confirms active exploitation of Exchange Server zero-day Pierluigi Paganini May 15, 2026 Microsoft warned that attackers are exploiting a new Exchange Server zero-day…
Ghostwriter group resumes attacks on Ukrainian Government targets
Ghostwriter group resumes attacks on Ukrainian Government targets Pierluigi Paganini May 15, 2026 ESET uncovered new Ghostwriter (aka FrostyNeighbor) activity targeting Ukrainian government organizations in…
Researchers uncover YellowKey and GreenPlasma Windows Zero-Days
Researchers uncover YellowKey and GreenPlasma Windows Zero-Days Pierluigi Paganini May 15, 2026 Researchers disclosed two new Windows zero-days named YellowKey and GreenPlasma affecting BitLocker and…
Linux Kernel bug Fragnesia allows local root access attacks
Linux Kernel bug Fragnesia allows local root access attacks Pierluigi Paganini May 14, 2026 Fragnesia, a new Linux kernel flaw tracked as CVE-2026-46300, could let…
U.S. CISA adds a flaw in Cisco Catalyst SD-WAN to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Cisco Catalyst SD-WAN to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 14, 2026 The U.S. Cybersecurity and Infrastructure…
Broadcom releases VMware Fusion security update for root access bug
Broadcom releases VMware Fusion security update for root access bug Pierluigi Paganini May 14, 2026 Broadcom patched a high-severity VMware Fusion flaw, CVE-2026-41702, that could…