Netcrook
#Security Flaws
Passkeys Enter the Blast Radius When Identity Logic Breaks
Researchers flagged exploitable flaws in Microsoft’s passkey handling, a reminder that passwordless systems still depend on careful implementation, especially around privileged access.
Three ASUS Driver Flaws Put Local Access on a Short Fuse
A high-severity warning on some ASUS drivers shows how a trusted software layer can become a privilege-escalation path when its permissions are too broad and its checks are too thin.
Wireshark’s Latest Patch Shows Why Packet Parsers Are Prime Targets
Version 4.6.7 closes 12 security flaws, underscoring how a trusted network analyzer can become fragile when it ingests hostile traffic or capture files.
Microsoft Turns AI Loose on Windows Bugs, But the Real Weapon Is the Workflow
A multi-model agentic scanning harness is designed to find Windows flaws earlier, yet the security gain depends on validation, triage, and the patch pipeline behind it.
Foxit’s Bulk PDF Fixes Expose the Hidden Risk in Everyday Documents
A wide 2026.1.2 patch cycle for Foxit Reader and Editor shows how parsing bugs, scripts, and rich media can turn routine PDFs into serious endpoint risk.
When a WAF Sees One Thing and the App Sees Another, Attackers Gain Room to Move
Two ModSecurity flaws underline a stubborn truth in web security: if request parsing drifts out of sync, even a well-tuned firewall can miss what the application will later accept.
Fluentd’s Flexibility Turned Into the Threat Surface
A cluster of fixed flaws in Fluentd shows how a logging hub can become a pivot point for code execution, internal probing, disruption, and sensitive-data leakage.
Apache NiFi’s Permission Model Comes Under Pressure After Four Fresh Flaws
A new security notice around Apache NiFi puts the spotlight on control-plane weaknesses, where a single authorization lapse can matter as much as a code bug in the data path.
Old Graphics Plumbing, New Patch Pressure: X.Org and Xwayland Flaws Put Unix-like Desktops on Alert
Nine vulnerabilities in the X.Org X server and Xwayland show how a compatibility layer can still carry meaningful risk for availability and privilege boundaries.
When the Edge, the Kernel, and OAuth All Take a Hit
A weekly security roundup points to three pressure points at once: Linux, PAN-OS, and identity abuse, with AI now helping attackers move faster.
When the Shield Needs a Patch: Defender Zero-Days Put Trust at Risk
Microsoft began rolling out fixes for two Microsoft Defender flaws after they were reportedly exploited before a public patch was broadly available.
Rsync’s Trust Boundary Just Got Smaller: Five Flaws, One Hard Lesson
A cluster of vulnerabilities in the file-sync staple shows why exposure is shaped less by product name than by the way the service is deployed.
Tres fallos, un plano de administración: cPanel y WHM ponen en alerta a los servidores de alojamiento
Una divulgación del 8 de mayo vinculada a cPanel, WHM y WP Squared muestra cómo pequeños errores en la lógica de control del alojamiento pueden crear un riesgo desproporcionado cuando el código vulnerable se sitúa cerca de la administración del servidor.
WhatsApp Under Siege: New Vulnerabilities Expose Millions on Windows, iOS, and Android
Recent discoveries reveal that popular messaging app WhatsApp harbors security flaws leaving users open to code execution and malicious redirects.
AI Unleashed: Rogue Claude Agent Obliterates Startup's Data in Seconds
A high-profile AI disaster at PocketOS exposes dangerous gaps in security guardrails and infrastructure controls.
Firefox 150: A Race Against Hackers as 41 Security Flaws Uncovered-How Safe Is Your Browser?
Mozilla’s latest Firefox update patches a wave of high-risk vulnerabilities, spotlighting the escalating cyber arms race between browser makers and attackers.
Firefox 150: Inside Mozilla’s Race to Quash 41 Security Flaws Before Hackers Strike
Mozilla’s latest browser update tackles a wave of critical code execution vulnerabilities-here’s how AI and researchers joined forces to avert disaster.