The IRIS C2 cybersecurity startup promises millions of dollars for undiscovered zero-day vulnerabilities. Furthermore, it offers mobile phone hacking tools directly to government agencies. However…

TL;DR Microsoft’s July 2026 Patch Tuesday fixes 570 vulnerabilities, including 57 rated critical and 510 rated important. Attackers are exploiting two zero-days in the wild: CVE-2026-56155 i…

Renowned cybersecurity researcher Nightmare-Eclipse has once again disclosed an unpatched local privilege escalation vulnerability affecting Windows 10 and 11. Orchestrated as a calculated act of …

The renowned cybersecurity firm Mindgard recently published an expose detailing a high-severity zero-day vulnerability harboring within Cursor, the prominent artificial intelligence coding assista…

TL;DR A researcher known as Nightmare-Eclipse has published details and proof-of-concept code for LegacyHive, a Windows User Profile Service privilege escalation flaw. The LegacyHive exploit abuse…

A Historic Season for Security Experts typically consider summer a quiet season for software updates. Nevertheless, the July patch release from Microsoft proved to be monumental. The corporation r…

TL;DR The Zero Day Initiative published advisory ZDI-26-444 on July 15, 2026. It covers a 7-Zip vulnerability tracked as CVE-2026-14266, scored CVSS 7.0, that can lead to remote code execution. Ve…

TL;DR SonicWall patched a critical SonicWall SMA1000 vulnerability, CVE-2026-15409, on July 14, 2026. Attackers are exploiting it in the wild to reach remote code execution. A public proof-of-conc…

Cursor and HackerOne closed it as “informative, out of scope.” Seven months later, still no patch. So is it even a bug?

At a glance Actor / group UTA0533 (Volexity tracking cluster); no nation or identity confirmed Activity type Zero-day exploit chain against internet-facing VPN appliances Targets / victims Organiz…