AI Agent Finds 21 Zero-Days in FFmpeg for $1,000
A startup's autonomous agent surfaced 21 previously unknown vulnerabilities in FFmpeg — including bugs dormant for over two decades — for roughly $1,000 in...
Signals and Shutdown: The System Comes Full Circle
Signals are how the kernel and processes communicate asynchronously — a mechanism for process control, error notification, and graceful shutdown. Here is how they work, how they are delivered, and how the system uses them to shut itself down.
Latest
IPC: How Processes Talk to Each Other
Process isolation is the design — every process has its own address space, its own file descriptors, its own view of memory. IPC is how isolated processes...
Second Cisco SD-WAN Zero-Day Chains From May's Auth Bypass — No Patch Available
CVE-2026-20245 is a privilege escalation zero-day in Cisco Catalyst SD-WAN Manager being actively exploited. It requires the access conditions created by...
Meta's AI Support Bot Handed Attackers the Keys to Instagram Accounts
Attackers abused Meta's AI-powered support chatbot to take over high-profile Instagram accounts by convincing it to redirect account recovery codes to...
The Authorization Problem: Why LLMs Cannot Guard Authentication Boundaries
When an AI agent is granted write-level access to account management functions, the security model collapses — not because the model is poorly designed, but...
Android Framework Integer Overflow Under Active Targeted Exploitation (CVE-2025-48595)
Google's June 2026 Android Security Bulletin patches an actively exploited integer overflow in the Android Framework that enables local privilege escalation...
CVE-2026-8732: WP Maps Pro Support Feature Allows Unauthenticated Admin Account Creation
A missing authentication flaw in WP Maps Pro's vendor support feature allows any unauthenticated attacker to create a WordPress administrator account with a...
Miasma: Credential-Stealing Worm Compromises Red Hat npm Namespace.
A credential-stealing worm designated Miasma compromised 32 packages under the @redhat-cloud-services npm namespace on June 1, targeting developer credentials...
Mechanics of Miasma: OIDC Abuse, Install-Time Execution, and npm Propagation.
The Miasma attack on @redhat-cloud-services packages used three compounding mechanisms to get malicious code into production environments — OIDC token abuse,...
Threads: One Process, Multiple Execution Paths
A thread is a second instruction pointer inside the same address space. The kernel creates threads the same way it creates processes — with clone() — but with...
A Nine-Year-Old ptrace Bug Let Unprivileged Users Read SSH Keys and Shadow Passwords
CVE-2026-46333, disclosed by Qualys on May 21, exploits a race condition in the Linux kernel's ptrace access check to steal SSH host private keys, shadow...
The Scheduler: How the Kernel Decides Who Runs Next
A Linux system runs hundreds of processes on a handful of CPU cores. The scheduler decides which process runs on which core, for how long, and in what order....