> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…
GreyNoise tracked AI agents exploiting PaperCut flaws, hitting 440+ instances across 395 organizations in 48 countries. Campaign mechanics and patch guidance.
cPanel patched an EmailTrack SQL injection letting a mail account run code as root (CVE-2026-67401, CVSS 9.9). Affected builds, patch steps and open questions.
Six critical ArcGIS CVEs in a year — SQLi, auth bypass, SSRF. Attackers tied to a Chinese APT held one deployment for a year.
JFrog patches a CVSS 9.8 auth bypass letting attackers mint admin tokens. Exploited ~4 days after disclosure — here's what happened and the fix.