OpenAI Daybreak: AI That Finds and Patches Vulnerabilities Before Hackers Do
OpenAI launched Daybreak, an AI-powered vulnerability detection and patch validation platform using GPT-5.5-Cyber. Here's what it means for the security…
🛡️
Cybersecurity
CVEs, exploits, pentesting & threat intel
73 posts
// cybersecurity
updated daily
🛡️ Featured
Grafana GitHub Hacked: CoinbaseCartel Stole the Entire Codebase — And Demanded Ransom
Pwn2Own Was Full — So Rejected Hackers Dropped Their 0-Days for Free Instead
Pwn2Own Berlin 2026 hit capacity and turned away researchers. Some responded by publicly releasing their zero-days without coordinated vendor disclosure…
Microsoft’s MDASH AI System Found 16 Windows Flaws Before Hackers Could
Microsoft's MDASH — a 100+ agent AI security system — found 16 new Windows vulnerabilities including 4 Critical RCEs, achieved…
Pwn2Own Berlin 2026: $1M+ Paid, AI Products Hacked, Windows Falls Again
Pwn2Own Berlin 2026 shattered records with $1M+ paid for 29 zero-days. OpenAI Codex, LiteLLM, ChromaDB, NVIDIA, Windows 11, and Microsoft…
One Phone Call Destroyed Cushman & Wakefield: The 500,000-Record Vishing Attack Nobody Is Talking About
ShinyHunters stole 500,000 Salesforce records from Cushman & Wakefield using a single vishing (voice phishing) call. When ransom talks failed,…
Cisco SD-WAN CVE-2026-20182: CVSS 10.0 Auth Bypass Actively Exploited — CISA Issues Emergency Directive 26-03
CVE-2026-20182 is a perfect-10 CVSS vulnerability in Cisco Catalyst SD-WAN actively exploited by the UAT-8616 threat group. CISA issued Emergency…
Foxconn Hit by Nitrogen Ransomware: 8TB of Apple, Nvidia & Google Schematics Stolen in 2026
Nitrogen ransomware gang claims to have stolen 8TB of data from Foxconn, including confidential schematics from Apple, Nvidia, Google, and…
NGINX Rift CVE-2026-42945: 18-Year-Old Flaw Threatens Millions of Servers
Critical NGINX Rift vulnerability CVE-2026-42945 (CVSS 9.2) exposes 18 years of servers to unauthenticated RCE. Public PoC is live —…
NGINX Rift CVE-2026-42945: 18-Year-Old Flaw Threatens Millions of Servers
Critical NGINX Rift vulnerability CVE-2026-42945 (CVSS 9.2) exposes 18 years of servers to unauthenticated RCE. Public PoC is live —…