Vulnerabilities
Binarly Discloses Six New U-Boot Bootloader Vulnerabilities in Routers, Cameras, and Server Chips
A six-flaw U-Boot disclosure with cross-vendor device implications — defender posture review this week.
Vulnerabilities
Researchers Disclose Unpatched "XRING" Flaw That Lets Remote Clients Crash HTTP/3 XQUIC Servers
An unpatched HTTP/3 QUIC-library finding — defender teams review protocol posture this week.
Supply Chain Attack
npm 12 Ships With Install Scripts Disabled by Default to Cut Supply-Chain Risk
A meaningful ecosystem-policy signal from npm after months of contributor-account compromises — defender developers review CI/CD posture this week.
Linux
Researchers Disclose "GhostLock," a 15-Year-Old Linux Flaw Enabling Root and Container Escape
Another long-standing Linux finding lands with defender-team implications across distributions and container platforms.
Policy & Government
France's ANSSI to Stop Certifying Non-Quantum-Safe Encryption
A sharp French policy signal on quantum-safe encryption — international PQC migration accelerates this week.
Artificial Intelligence (AI)
Adversa AI Research — “GuardFall” Shell Injection Bypasses 10 of 11 Open-Source AI Coding Agents
An AI-coding-agent bypass with cross-vendor implications — defender posture-review work for organizations running open-source agents this week.
Artificial Intelligence (AI)
"BioShocking" Research Tricks AI Browsers Into Leaking User Credentials
A multi-vendor AI-browser research disclosure — defender posture-review work for organizations deploying agentic browsers this week.
Mobile Security
Researchers Disclose AirDrop and Quick Share Flaws Affecting Five Billion Devices
Two researchers mapped the proximity-sharing protocols behind AirDrop and Quick Share and found six flaws spanning five billion Apple and Android devices, with vendor fixes only partly shipped.
Linux
Researchers Publish "pedit COW" Linux Disclosure (CVE-2026-46331)
Researchers detailed pedit COW, CVE-2026-46331, a Linux kernel privilege-escalation flaw in the act_pedit traffic-control action — a second Linux disclosure in the same weekend as DirtyClone, with distribution patch tracking continuing.
Linux
Researchers Publish "DirtyClone" Linux Kernel Disclosure (CVE-2026-43503)
Another Linux kernel research disclosure — distribution patch tracking work for the week. JFrog published a working exploit for DirtyClone, a local privilege escalation to root in the kernel networking stack, fixed upstream in late May.
Vulnerabilities
Researchers Disclose macOS Flaw Allowing Standard Users to Disable EDR and MDM
A macOS endpoint-protection bypass with defender posture-review implications. XM Cyber researchers showed that a standard, non-admin user can silently unload EDR and MDM agents on macOS, abusing legitimate XPC behavior rather than a single patchable bug.
Vulnerabilities
Researchers Publish Squid Proxy Bug "Squidbleed" (CVE-2026-47729) After 29 Years
A 29-year-old proxy bug surfaces — defender review for Squid Proxy deployments. Researchers at Calif.io disclosed Squidbleed, a heap over-read that can leak another user's cleartext HTTP request on a shared Squid proxy.