The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...
EmDash, the secure serverless CMS successor to WordPress, fixes plugin risks and empowers global publishing in the AI era.
The UAT-10608 hacking group is using automated scanning and scripts to exploit React2Shell in a large-scale credential ...
Google patches 21 Chrome vulnerabilities, including an actively exploited zero-day flaw that could enable code execution and ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...