Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerability news

Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.

vulnerabilityvia SecurityWeek

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first...

Oct 28, 2026 UTC
vulnerabilityvia Schneier on Security

Bias in Qwen3-Coder Model

Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers: tell the model who the code is for, and the security of what...

Oct 26, 2026 UTC
vulnerabilityvia Schneier on Security

New Serious PHP Vulnerabilities Released and Patched

PHP maintainers have released fixes for two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote...

Oct 22, 2026 UTC
vulnerabilityvia Schneier on Security

Workshop on Economics and Information Security (WEIS) Archive

There’s a new archive of all the papers from twenty-five years of the Workshop on Economics and Information Security (WEIS). Really nice resource. It’s fun to reread my 2002 essay...

Oct 21, 2026 UTC
vulnerabilityvia Schneier on Security

Possible new Cellebrite iPhone Radio Zero-Day

Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “adva...

Oct 20, 2026 UTC
vulnerabilityvia SecurityWeek

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root F...

Oct 28, 2026 UTC