All topics
We’ve heard all of the hysteria around the Vulnpocalypse caused by AI-assisted bug hunting and the shrinking time to exploit window. Now Jeremiah Grossman dispels those myths and shows exactly what the data reveals about how many bugs are actually exploited and how long it takes for attackers to target them.
Labeled "MikroTrick" by researchers at CERT Polska who discovered and disclosed six vulnerabilities in the software, the campaign targets devices with SSH services reachable from the public internet
CVE-2026-82329 is a simple authentication bypass that can allow an attacker to get admin privileges quite easily
This flaw allows remote, unauthenticated attackers to read sensitive data from internal network services or cloud metadata endpoints.
The vulnerability, which effectively provides unauthenticated administrative access to the RMM console, stems from two related security issues
Exposures of AI/LLM tools has risen by more than 60 percent over the last nine months.
