Vulnerability (CVE)
Researchers at Calif discovered a remote denial-of-service exploit codenamed HTTP/2 Bomb affecting NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora, present in each server's default HTTP/2 configuration and found using OpenAI Codex by...
Microsoft released fixes for a record 206 vulnerabilities on Tuesday, including 39 rated Critical and 167 rated Important, among them three publicly disclosed zero-days. The set covers 56 remote code execution and 63 privilege escalation flaws, led by...
Microsoft released updates for nearly 200 security holes across Windows and supported software in June 2026, a record for its monthly Patch Tuesday cycle, with nearly three dozen rated critical and public exploit code available for at least three. The...