Vulnerability (CVE)
Microsoft released a mitigation on Tuesday for a BitLocker bypass dubbed YellowKey, tracked as CVE-2026-45585 with a CVSS score of 6.8, after researcher Chaotic Eclipse (aka Nightmare-Eclipse) published a proof of concept. The exploit places crafted 'FsTx'...
GitHub confirmed that a breach of its internal repositories came from an employee device compromised by a poisoned version of the Nx Console VS Code extension, allowing a cybercriminal group called TeamPCP to exfiltrate about 3,800 repositories. The Nx...
A researcher known as Chaotic Eclipse (aka Nightmare-Eclipse) publicly disclosed details of six Windows zero-day vulnerabilities over the past month, including BlueHammer (CVE-2026-33825), RedSun (CVE-2026-41091), UnDefend (CVE-2026-45498), YellowKey...
Microsoft released fixes for a record 206 vulnerabilities on Tuesday, including 39 rated Critical and 167 rated Important, among them three publicly disclosed zero-days. The set covers 56 remote code execution and 63 privilege escalation flaws, led by...
Security researcher Chaotic Eclipse released a Windows BitLocker bypass called GreatXML, which the researcher says took four hours to find and which spawns a shell with unrestricted access to the BitLocker volume if every step is followed correctly....
This week's recap details DirtyClone (CVE-2026-43503), a new variant of the Dirty Frag Linux kernel flaw that lets local users gain root privileges via cloned packets, working on Debian, Ubuntu, and Fedora with default namespace configurations. JFrog said...