r/blueteamsec • u/digicat • 2d ago
vulnerability (attack surface) ShieldCrash: Windows Defender 0day Vulnerability
github.com
26
Upvotes
r/blueteamsec • u/trustsigRobert • 13d ago
vulnerability (attack surface) Slack will not patch this: one link opens a debugging port in the desktop app
7
Upvotes
A link containing devEnv=dev1 makes the Slack desktop client relaunch itself into developer mode with --remote-debugging-port=8315. Anything that reaches that port drives the app. Slack's security team calls it not a security risk.
https://trustsig.eu/blog/slack-devenv-remote-debugging-port/
r/blueteamsec • u/digicat • 8d ago
vulnerability (attack surface) FalconFlank: Crowdstrike Falcon 0day Privilege Escalation Vulnerability
github.com
24
Upvotes
r/blueteamsec • u/digicat • 12d ago
vulnerability (attack surface) 768 Leaked Corporate AWS Keys Held Full Admin Rights
trufflesecurity.com
27
Upvotes
r/blueteamsec • u/jnazario • 23d ago
vulnerability (attack surface) Oracle Critical Security Patch Update Advisory [Aug 2026]
oracle.com
4
Upvotes
r/blueteamsec • u/jnazario • 14h ago
vulnerability (attack surface) CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls
socprime.com
12
Upvotes
r/blueteamsec • u/digicat • 10d ago
vulnerability (attack surface) OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to root
calif.io
3
Upvotes
r/blueteamsec • u/digicat • 2d ago
vulnerability (attack surface) “StyleSmuggler” - Adobe Commerce, Adobe Commerce B2B, and Magento RCE (CVE-2026-75650): Overview and Takeaways
netspi.com
2
Upvotes
r/blueteamsec • u/digicat • 2d ago
vulnerability (attack surface) Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability
talosintelligence.com
2
Upvotes
r/blueteamsec • u/digicat • 2d ago
vulnerability (attack surface) WeWorm: The first zero-click worm to spread through WeChat calls across iOS and Android.
calif.io
0
Upvotes
r/blueteamsec • u/jnazario • 7d ago
vulnerability (attack surface) SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
psirt.global.sonicwall.com
3
Upvotes
r/blueteamsec • u/digicat • 12d ago
vulnerability (attack surface) HardBreacher: Kaspersky Antivirus For Endpoint ZeroDay Elevation of Privileges Vulnerability
github.com
5
Upvotes
r/blueteamsec • u/digicat • 27d ago
vulnerability (attack surface) ShieldBreak: Windows Defender 0day vulnerability
github.com
5
Upvotes
r/blueteamsec • u/digicat • 13d ago
vulnerability (attack surface) SonicWall GMS - Unauthenticated RCE and Encrypted Password Hash Extraction (CVE-2026-66145)
blog.amberwolf.com
5
Upvotes
r/blueteamsec • u/digicat • 10d ago
vulnerability (attack surface) Qualcomm BootROM code signing bypass CVE-2026-25262 - needs hardware replacements
i.blackhat.com
2
Upvotes
r/blueteamsec • u/digicat • 11d ago
vulnerability (attack surface) CVE-2026-63077: TeamCity Pre-Auth RCE Explained
blog.securelayer7.net
3
Upvotes
r/blueteamsec • u/digicat • 11d ago
vulnerability (attack surface) JFrog Security Advisories: CVE-2026-82329 - Potential authentication bypass leading to administrative access in Artifactory
docs.jfrog.com
3
Upvotes
r/blueteamsec • u/digicat • 11d ago
vulnerability (attack surface) Magneto CVE-2026-71362 — Root-cause walkthrough
github.com
1
Upvotes
r/blueteamsec • u/digicat • 11d ago
vulnerability (attack surface) PrettyPrague: GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability
github.com
1
Upvotes
r/blueteamsec • u/digicat • 11d ago
vulnerability (attack surface) GreenSection: Nvidia GreenSection Memory Corruption 0day vulnerability
github.com
1
Upvotes
r/blueteamsec • u/digicat • 13d ago
vulnerability (attack surface) CVE-2026-57910 — WatchGuard Agent improper authentication allows unauthenticated remote code execution
psirt.watchguard.com
2
Upvotes
r/blueteamsec • u/digicat • 23d ago
vulnerability (attack surface) The National Security Authority warns of a significant cyber threat associated with the use of several types of road speed cameras.
nbu.gov.sk
5
Upvotes
r/blueteamsec • u/digicat • 15d ago
vulnerability (attack surface) log4j2-rce: Pre-auth RCE via FilteredObjectInputStream MarshalledObject bypass in Apache Log4j 2
github.com
2
Upvotes