Security Advisory / Vulns / 0day

[old.Osy]

Windows LTSC Download | MAS

All download links lead to genuine files only.

massgrave.dev

 

[old.Osy]

To whoever is born before the 80's - High-severity WinRAR 0-day exploited for weeks by 2 groups

 

[MYstIC G]

To whoever is born before the 80's - High-severity WinRAR 0-day exploited for weeks by 2 groups

Poor WinRAR, first it's nobody ever registering, it's now a security vulnerability

 

[old.Osy]

Copy Fail — 732 Bytes to Root

CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.

copy.fail

 

[old.Osy]

Popular DAEMON Tools software compromised

Targeted by threat actors: individuals and organizations across 100+ countries and territories, with the majority of victims located in Russia, Brazil, Turkey, Spain, Germany, France, Italy, and China.

securelist.com

 

[old.Osy]

LastPass says hackers stole customer data through a supply chain breach at Klue

LastPass notified customers that personal data and support cases were stolen after hackers breached Klue and used stolen OAuth tokens to access Salesforce.

thenextweb.com

 

[Deebs]

This is the biggest issue facing any Company, you are only secure as your weakest link in the chain. Do not assume anything outside of your Company unless verified by security auditors to a well publicised standard.

 

[Zarjazz]

Pretty much every site running PHP is scrambling to apply this security fix, it's a bad one: PHP: News Archive - 2026

@Deebs get patching!

 

[Deebs]

Pretty much every site running PHP is scrambling to apply this security fix, it's a bad one: PHP: News Archive - 2026

@Deebs get patching!

I did it the moment I received the alert, also got a phone call from a nephew advising me about the vulnerability. He reads FH.

Lots of sites took themselves offline due to the complexity of patching or upgrading the php version, still lots of sites dark even now.