The RCE that AMD wouldn't fix(mrbruh.com)

291 points by MrBruh 4 months ago | 119 comments

I pwned half of America's fast food chains simultaneously(mrbruh.com)

988 points by MrBruh 2 years ago | 411 comments

A security researcher's blog post describing how exposed Firebase credentials at AI hiring vendor Chattr gave access to data across many US fast food chains.

MSI Center – How to gain SYSTEM privileges in seconds(mrbruh.com)

131 points by MrBruh 3 months ago | 52 comments

ASUSpicious Flaw – Users' Information Exposed Since 2022(mrbruh.com)

57 points by MrBruh 1 year ago | 7 comments

Optimizers need a rethink(typesanitizer.com)

132 points by ingve 2 years ago | 139 comments

Unauthenticated RCE in Motorola's MR2600 Router(mrbruh.com)

72 points by MrBruh 3 months ago | 25 comments

Zenbleed(lock.cmpxchg8b.com)

1160 points by loeg 3 years ago | 327 comments

Tavis Ormandy's writeup of Zenbleed, an AMD Zen 2 CPU vulnerability that leaks data from vector registers, covering exploitation, discovery, and mitigation.

Unauthenticated remote code execution in OpenCode(cy.md)

406 points by CyberShadow 9 months ago | 135 comments

Security advisory describing an unauthenticated remote code execution vulnerability in the OpenCode AI coding assistant's local HTTP server, fixed in later versions.

How we hacked McKinsey's AI platform(codewall.ai)

420 points by mycroft_4221 7 months ago | 168 comments

CodeWall blog post describing how its autonomous offensive agent found vulnerabilities in McKinsey's internal AI platform Lilli.

Claude Code Found a Linux Vulnerability Hidden for 23 Years(mtlynch.io)

351 points by eichin 6 months ago | 226 comments

Blog post by Michael Lynch describing how Anthropic researcher Nicholas Carlini used Claude Code to find remotely exploitable Linux kernel bugs, including one hidden for 23 years.

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 5 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

RCE Vulnerability in React and Next.js(github.com)

559 points by rayhaanj 10 months ago | 214 comments

GitHub security advisory GHSA-9qr9-h5gf-34mp for a critical (CVSS 10.0) remote code execution vulnerability in React Server Components affecting Next.js, with patched versions listed.