PDS software with bells & whistles you didn’t even know you needed. will move this to its own account when ready.

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2

The new sudo-rs is meant to be a near drop-in replacement for sudo, but some of the less secure aspects of sudo will not be supported.

What's Changed Update the README "Basic Usage" section & add simple Node2D movement example by @DragonAxe in #37 feat: add explicit configuration of transform sync mode by @dcvz in #44 feat(docs):...

YouTube video by RustNL

Blog post: Is Rust faster than C? by Steve Klabnik

A deep technical breakdown of CVE-2025-49113, a critical Roundcube vulnerability involving PHP session serialization. Learn how the bug was discovered, exploited, and responsibly disclosed with full P...

They’re interesting: Tracked as CVE-2025-5054 and CVE-2025-4598, both vulnerabilities are race condition bugs that could enable a local attacker to obtain access to access sensitive information. Tools...

Explore how a hard-coded JWT in Cisco IOS XE WLC enables unauthenticated file upload and potential RCE—and how to mitigate it.

This is the personal website of Egidio Romano, a very curious guy from Sicily, Italy. He's a computer security enthusiast, particularly addicted to webapp security.

In this post I’ll show you how I found a zeroday vulnerability in the Linux kernel using OpenAI’s o3 model. I found the vulnerability with nothing more complicated than the o3 API &#821…

On Thursday, May 15, 2025, Ivanti disclosed two critical vulnerabilities - CVE-2025-4427 and CVE-2025-4428 - affecting Ivanti Endpoint Manager Mobile (EPMM) version 12.5.0.0 and earlier.

A critical privilege escalation vulnerability has been discovered in the premium WordPress theme Motors, which allows unauthenticated attackers to hijack administrator accounts and take complete contr...

VMware patches flaws that expose users to data leakage, command execution and denial-of-service attacks. No temporary workarounds available.

None

Intel, AMD and Arm each published security advisories on Patch Tuesday, including for newly disclosed CPU attacks.

Industrial giants Siemens, Schneider Electric and Phoenix Contact have released ICS security advisories on the May 2025 Patch Tuesday.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

None

This Patch Tuesday Analysis addresses Microsoft’sMay 2025 Security Updates. FIRE is actively working on coverage for these vulnerabilities.

How to determine if you are vulnerable.

View open positions at Bluesky PBC

: Because vulnerability management has nothing to do with national security, right?

YouTube video by Where Warlocks Stay Up Late