The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
NASA had a flaw that could have allowed threat actors unauthorized access to their Mission AI Hub - a portal that holds plain-text chat history of engineering development, alongside a proxy to specialized government models without restrictions.
Glad we could help securing it!
$300,000 for the hacker who can crack NGINX on stage 💸💸💸
Can you uncover what others missed in one of the web's most critical open-source projects 🧠?
🔗 Explore official targets, scope, & rules ↴
zeroday.cloud/2026-competiti…
SEE YOU THERE!
We’ve confirmed a KVM 0day through our Vercel Sandbox bounty program. Affecting the industry’s gold standard solution for Linux virtualization.
2026 is wild! Thankful to Paulos and other researchers helping us make the most secure sandbox for agents. Full writeup coming.
🚨 The stakes just got higher. ZERODAY.CLOUD 2026 is coming soon! 🚨
We are back, and this time we are bringing a jaw-dropping $6.5 MILLION prize pool to the table. 💰
Join forces with the brightest minds in infosec to hunt down vulnerabilities in the critical open-source software powering the modern cloud.
This isn't just a competition; it's a mission to secure the future of cloud computing.
Are you ready to claim your bounty?
Submit your exploit ➡️ zeroday.cloud
Last year, we saw 11 critical zero-days in just 2 days at our cloud hacking competition.
This year, AI is raising the bar.
ZeroDay.cloud/2026 is back with harder targets and bigger bounties.
I have a feeling this one’s going to be wild 👀
We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯
And all we needed was a single key 🔑
This is the story of #CosmosEscape 🧵👇
Atlas, our AI vulnerability research system, is now ranked #1 on CyberGym. We've used it to discover and responsibly disclose more than 200 confirmed vulnerabilities across gVisor, Linux kernel, containerd and many other projects.
Here’s how Atlas works behind the scenes 🧵
Huge congrats to @sagitz_ for their $100k bounty! Collaborating with you was a pleasure. Your work makes a real difference. Full story on our blog: github.blog/security/securin…
Cyber people, the most important reminder of the month: BlueHatIL is happening on June 23–24 - and even if you registered for the original dates, you’ll still need to register again for the updated event.
Yes, again. We know❤️
Register here: microsoftrnd.co.il/bluehatil…
The magical news you’ve all been waiting for: registration for the new BlueHat IL 2026 date is officially open! Spots are limited - go grab yours!
Register here: aka.ms/BlueHatILRegistration
Full Agenda: microsoftrnd.co.il/bluehatil…
Once @wiz_io disclosed, we validated the finding, deployed a fix to github(.)com, and confirmed there was no exploitation in less than two hours.
Read more about what happened, how we responded, and what we are doing to prevent similar issues in the future. ⬇️
github.blog/security/securin…
We landed on a shared node serving millions of repositories belonging to other users and orgs - all of which were accessible to our user🔓
We confirmed cross-tenant access by reading our own private repo from a different user
We disclosed to @GitHub, who deployed a fix on GitHub.com the same day (!) and released patches for all supported GHES versions 🛡️
⚠️ GHES customers: upgrade to 3.19.3+ immediately.
Read the full technical breakdown here →
wiz.io/blog/github-rce-vulne…