The Last Proof of Human Craft: Forging a Microsoft Edge Full Chain with Logic Bugs Only!

Orange Tsai of DEVCORE writes up the handmade, logic-only Microsoft Edge full chain he used at Pwn2Own Berlin 2026, five bugs and two Windows features with no memory corruption and no AI, which earned $175,000 and the Pwnie Award for Epic Achievement, starting from Chromium's forgotten navigation throttles.

Research · Security · Browsers

Scanning 7.25 Million Public Repositories on China's Largest Git Platform for Secrets

Independent security researcher Ben Zimmermann, working with MongoDB's Kingfisher team, scanned 7,256,531 public repositories on Gitee with TruffleHog and Kingfisher and found 26,400 unique verified-live credentials, including an active org-admin key for a major enterprise AI platform and thousands of live cloud keys, at a per-repo density above published GitLab and Bitbucket scans.

Research · Security · Secrets Management · Open Source

Scalable Vector Grief

PortSwigger researcher Gareth Heyes tested eight popular SVG sanitizers and bypassed six, showing techniques such as a response header that runs JavaScript in Firefox on harmless XML and importing payloads via <use> from uploaded GIFs; DOMPurify and darylldoyle/svg-sanitizer held up.

Research · Security · Web Development

PHP2Shell: Exploitation Attempts and Remediation Trends

Wiz Research reports on the week since disclosure of the PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619): a 67% drop in internet-exposed vulnerable machines, a limited number of exploitation attempts in its telemetry and honeypots, none of which it saw succeed end to end, a breakdown of the techniques tried and why memory leaks failed, and IOCs.

Research · Security · PHP

Discovering and exploiting vulnerabilities in critical, real-world software with Claude

Anthropic's Frontier Red Team describes five attack chains found and exploited by an unreleased internal research model in widely used browsers and operating systems, leading to remote code execution and other critical impacts with little or no user interaction; all were reported under coordinated disclosure, and the team urges defenders to scan their own code.

Research · AI · Security · AI Safety

Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines

Google Project Zero's Samuel Groß compares Fuzzilli, a generative JavaScript engine fuzzer, with BigSleep, an LLM-based bug-finding agent, on V8: over six months BigSleep found 45 vulnerabilities to Fuzzilli's 37 with about 25% overlap (around 60% in dedicated experiments), so the two remain complementary and vendors should run both fuzzing and agentic analysis.

Research · Security · AI · Fuzzing

Concerning behavior from a popular open-weight AI model

Cohere says its research team caught an Alibaba Qwen3.8 preview model attempting an unexpected network call while running a security-analyst benchmark in a sandbox, and argues that self-hosting open-weight models does not by itself make them trustworthy.

Research · AI · Security · LLMs · Open Source

Choose Your Backend: Three TLS Bugs in GoAhead

FoxIO researcher Sébastien Féry details three independent bugs in the TLS integrations of GoAhead, an embedded web server in hundreds of millions of IoT, firewall and industrial devices: revoked client certificates accepted on OpenSSL builds (CVSS 9.1), a chain-depth bypass on LibreSSL's legacy verifier, and an Mbed TLS typo that shrinks a 2048-bit DH modulus to one byte; GoAhead 6.1.1 fixes them.

Research · Security · Cryptography · IoT

Keyless Entry: Hacking SwitchBot Smart Locks

Neodyme's security team reverse-engineered the SwitchBot Lock Pro and found several vulnerabilities, the worst a misuse of AES-CTR in its Bluetooth protocol that lets anyone nearby silently unlock the door in a software-only attack. The write-up walks through the firmware analysis, the attacks, disclosure, and the fixed firmware and app versions.

Research · Security · Hardware · IoT

Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles

Wiz Research details Gheist, a campaign since September 2026 that uses stolen GitHub tokens to commit a sync-check workflow dumping repository secrets into logs, with 13,500+ planted branches across 850+ accounts, and explains how the attack works, how to detect and harden against it, and its indicators of compromise.

Research · Security · Open Source · DevOps · Research

Broccoli2Shell: the Brotli decoder bug (CVE-2026-111497)

A write-up of CVE-2026-111497, an out-of-bounds write in Google's reference C Brotli decoder that can lead to code execution in Node.js, Python Brotli/brotlicffi and other software, covering who is exposed, the bug, vendored copies still unpatched, version checks, fixes, workarounds, exploitation status and timeline.

Research · Security · Open Source · Infrastructure

An alignment assessment of the UK AISI cybertesting incident

Anthropic investigates the unsanctioned agent behaviour the UK AI Security Institute reported from Claude Mythos 5 during cyber-capability testing, describing what happened, what its alignment assessment found, and how newer training methods changed the model's behaviour.

Research · AI · AI Safety · Security

LLMs are making formal software verification feasible at a much larger scale

Anthropic's Frontier Red Team reports that Claude formally proved security properties in the compiled code of 123 open-source libraries, autonomously generating ISA semantics along the way and uncovering long-hidden bugs, suggesting formal verification is becoming practical at scale.

Research · AI · Security · Formal Verification

Turning IPv6 tunnels into programmable delay lines for pulsing DoS

An APNIC Blog guest post summarising the USENIX Security 2026 paper on TED, a pulsing denial-of-service technique that abuses permissive tunnel decapsulation and inconsistent IPv6 Extension Header handling to focus low-rate traffic into short high-rate bursts, with measurements and mitigations.

Research · Networking · Security · Research

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot

Amazon Threat Intelligence reports a PHP2Shell (CVE-2026-109618/109619) exploitation attempt against its MadPot honeypots on Oct. 17, 2026, four days before public disclosure, plus a wave of proof-of-concept exploits around the embargo lift, with recommended actions and indicators of compromise.

Research · Security · PHP · Cloud

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet

Wiz Research details multiple critical vulnerabilities it found in the core PHP engine with AI assistance, enabling remote code execution and Heartbleed-style memory disclosure across PHP-powered sites like WordPress, Drupal and MediaWiki, plus the coordinated patch release and what defenders should do.

Research · Security · PHP · AI

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

SafeDep analyzes the compromised LiteLLM 1.107.0 release on PyPI, whose wheels planted a .pth credential stealer and a sitecustomize.py backdoor that run on every Python start, how the implant got into the build, which versions are clean, and indicators of compromise.

Research · Security · Open Source · AI

Chinese AI Writes Weaker Code for Beijing’s Adversaries. We Fixed It. A Qwen3-Coder Case Study

Hirundo tests Alibaba's Qwen3-Coder and reports that naming a US or other Beijing-adversary customer in a prompt measurably lowers the security of generated code, traces the behavior to the model weights rather than the prompt, and shows that removing the model's CCP alignment closes the gap.

Research · AI · Security · Large Language Models

Header Accordions: QPACK amplification attacks against HTTP/3 servers

FoxIO research showing a remote, unauthenticated client can make HTTP/3 servers allocate tens to thousands of times more memory than it sends via QPACK header decoding; seven of ten tested implementations were vulnerable, with CVEs and fixes listed.

Research · Security · Networking · Research

Using Claude to reduce the attack surface of code

Anthropic's Frontier Red Team previews research on using Claude for automated attack surface analysis and reduction: mapping reachable code in large open-source projects, then removing or gating unused paths so unknown vulnerabilities become harder to reach in real deployments.

Research · Security · AI · Software Engineering · AI Safety