reported a chrome fullchain (web -> shell) on pixel... 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome. now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|show more

#CVE-2026-40466 is a bypass of CVE-2026-34197 in Apache ActiveMQ,... exploiting the vm:// protocol to achieve Remote Code Executionshow more

Our team has just successfully reproduced the IngressNightmare vulnerability... (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974) and created a custom exploit achieving RCE. It's a Pre-Auth RCE affecting Ingress NGINX that allows complete cluster takeover. We'll share our exploit soon. In the original post from the Wiz team, they didn't mention the path traversal technique used to load a malicious library via /proc. Hakai Offsec @quimerax_asmshow more

October 1944 footage from the Battle of Leyte Gulf... shows Wildcats finding a landing spot after their carrier was bombed, only to discover the hard way that the airstrip wasn't yet operational. (The carriers CVL-23, CVE-73, and CVE-63 were all lost in that battle.)🫡show more

99 DR backlink from Google: 1. Go to the... Chrome Web Store. 2. Sign up as a developer. 3. Pay a one-time $5 registration fee. 4. Build a Chrome extension. 5. Publish it on the store. Now, you will get a FREE backlink. And, referral traffic, too...show more

Today's exploit is again for the latest Ubuntu 26.04,... a UAF in SCTP: CVE-2026-68162. It was introduced in Jan 2025 and fixed upstream in Jul 2026. Discovered and exploited by the NebuSec security pipeline. Exp source code:show more

Today's exploit is for the latest Fedora 44, a... UAF in netfilter, CVE-2026-52912. It was introduced in Mar 2016 and fixed upstream in May 2026. Discovered and exploited by the NebuSec security pipeline. (RANDOM_KMALLOC_CACHES + SELinux) Exp source code:show more

Found an SSRF in Sliver C2 (CVE-2025-27090), allowing an... attacker to read and write TCP traffic through affected teamservers. Demo shows leaking the IP of a Sliver teamserver hidden behind redirectors Writeup and PoC in repliesshow more

An analysis of CVE-2026-21236 - A heap based buffer... overflow in the Microsoft Windows Kernel afd.sys - was just published by Emily L a recent secondment with my team EDG! Nice work for her first triage of a kernel memory corruption bug!show more

qwerty and I exploited a VSock 1-day in Google... kernelCTF back in *February*, securing $71,337 🥳 (CVE-2025-21756, exp237/exp249) And I’ve just published the write-up: A kernel developer reviewing a patch for a separate VSock bug I submitted accidentally discovered this vulnerability, and we were the first to exploit it. PoC 💻: root on Ubuntu 24.04show more

💥 Introducing "Zapscape" (CVE-2026-64561) A Guest-to-Host Escape in KVM/x86... exploiting a UAF in the shadow MMU's recursive "ZAP" path. Can escape to the host on x86 public clouds that expose nested virtualization. A separate vulnerability from Januscape. If you match the vulnerable conditions, apply the patch immediately. Details:show more

A liberal TikToker is selling a t-shirt that glorifies... the recent assassination of UnitedHealthcare CEO Brian Thompson in NYC. “deny , defend, depose” was reported to have been on the shell casings.show more

Is it better to crack an egg on a... flat surface or on the edge of something? Cracking an egg on a countertop or cutting board tends to make a cleaner fracture and pushes the shell inward less aggressively, so you’re less likely to get little shell fragments in the egg. Cracking it on the edge of a bowl or pan can drive shards inward and occasionally puncture the yolk. I'm a flat egg cracker.show more

A few people asked if we show videos. No,... we do not! It’s all realtime animation, created with code, running in the browser. We run CHROME to check if 1 pixel in the software is *exactly* 1 pixel on the hardware and if we get the right framerate.show more

I put Breakout (aka Brick Breaker) inside Google Calendar... and taught it to decline meetings. It's called BreakTime and it's live NOW in the Chrome Webstore! Never go to a meeting again 😈 🧵show more

As of Chrome 131 you have more options to... style `<details>` and `<summary>`. You can now use of the `display` property on these elements, and also use a `::details-content` pseudo-element to style the part that expands and collapses.show more

Introducing: Gemini in Chrome, your personal AI browsing assistant.... Click the Gemini icon in your Chrome window and type or talk to get a quick summary, clarify concepts, and find answers—without switching tabs. Rolling out first to Gemini subscribers on desktop in the U.S. #GoogleIOshow more

Confirmed (with style!) - Interrupt Labs combined a path... traversal and an untrusted search path bug to exploit the Lexmark CX532adwe. They got a reverse shell and loaded Doom on the LCD. We couldn't play it though :-[ Still awesome to see. #Pwn2Ownshow more

A Look Back at the Iconic "Nike Chrome Scorpion"... Ball of 2002 🦂 In 2002, Nike revolutionised sports marketing with its "Secret Tournament" campaign, a dazzling blend of football artistry and cinematic storytelling. Central to this campaign was the Nike Chrome Scorpion ball, an eye-catching design that became synonymous with the high-energy, knockout-style competition featured in the advertisement. ✍🏼 (Cred Mania.91)show more

The Chernobyl "tomb" — officially called the Sarcophagus -... was a giant steel and concrete shell built in just 206 days after the 1986 disaster to contain the radioactive remains of Reactor 4.show more