Vulnerability Research
CVE and zero-day breakdowns: root cause, exploitation, who is exposed, and how to patch, mitigate and detect.
CVE-2026-0322: The PAN-OS Zero-Day That Turns an Admin Login Into Root on the Firewall
Palo Alto Networks has patched an actively exploited code injection flaw in the PAN-OS management interface that lets an authenticated admin run code as root on PA-Series, VM-Series and Panorama. CISA gave agencies three days to fix it. Here is what it does, why "authenticated" is less comforting than it sounds, and how to respond.
- Mar 172026Mar 17, 2026
The End of an Era: Microsoft Kills WDS Hands-Free Deployment for Windows 11 & Server 2025 Following Critical RCE
CVE-2026-0386 marks the end of WDS hands-free imaging. Why Microsoft is forcing a shift to Zero Trust to prevent supply-chain attacks.
7 min#cve#windows#rce
- Feb 272026Feb 27, 2026
Silent Privilege Escalation: How Public Google API Keys Now Expose Gemini Data
For over a decade, Google told developers it was safe to put API keys in public code. Then, AI changed the rules.
6 min#ai-security#cloud#api-keys
- Feb 252026Feb 25, 2026
RoguePilot: How a Passive Prompt Injection Led to GitHub Repository Takeovers
A deep dive into RoguePilot: How passive prompt injection turns GitHub Copilot into an insider threat for repo takeovers.
7 min#ai-security#prompt-injection#github
- Feb 192026Feb 19, 2026
They Hacked the CSS: Inside Chrome’s First Zero-Day of 2026 (CVE-2026–2441)
Google confirms active exploitation of CVE-2026-2441. Inside the CSS Use-After-Free vulnerability compromising Chrome browsers worldwide.
5 min#zero-day#browser#cve
- Feb 142026Feb 14, 2026
The "Dumb" Editor That Got Too Smart: When Feature Bloat Leads to RCE
Notepad was supposed to be the safe harbor of Windows utilities. Then Microsoft added Markdown, and things got complicated.
5 min#rce#windows#cve