Recent Advisories

Severity ID Title Vendor Product Date Type
NONE H1:3832393

curl: libcurl upload read callbacks miss recursive API guard, allowing prohibited multi API reentry and ASAN-confirmed UAF_H1:3832393

## Summary: Several libcurl upload read callback paths invoke the application-provided CURLOPT_READFUNCTION without marking the easy handle as bein...

N/A N/A HACKERONE
HIGH 8.8 THN:9247B208C4F...

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs_THN:9247B208C4FFADCDFC198B9F5D16121C

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgEWbrJH-z_uAL6GFaOqplYF1ewSOBvFpaKD24W74VEBaSO-pW3sy0I0e57Bmc9yBKV4vb6zWYaVjd-oTSy2...

N/A N/A THN
NONE WIRED:9AB3DD2ED...

Meta Contractors Posed as Teens to Prompt Rival Chatbots About Suicide, Sex, and Drugs_WIRED:9AB3DD2ED75ACDEE876552BBEA9C220C

Hundreds of contractors working on a project for Meta pretended to be kids in order to see how other chatbots like Gemini and ChatGPT would respond...

N/A N/A WIRED
NONE TRENDMICROBLOG:...

TONResolver RAT Abuses TON Blockchain to Target Japan’s Hotel Industry_TRENDMICROBLOG:1687EF9DF6B2AEFD4185295934D5FDC8

In this blog entry, TrendAI™ Research examines a wave of phishing emails observed in May 2026 that targeted Japanese accommodation facilities using...

N/A N/A TRENDMICROBLOG
NONE HACKREAD:6CDCF7...

212 New Venezuela Earthquake Domains Prompt Donation Scam Warnings_HACKREAD:6CDCF7B154C60DEF8886FE077587FBA7

Researchers spotted 212 new domains registered after Venezuela's earthquake, warning donors of donation scam risks and urging them to verify relief...

N/A N/A HACKREAD
NONE THN:C8391FC028E...

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input_THN:C8391FC028E73E226BA3BA54EF61F2E4

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOcObOpyIQZzuiNoFu6Lv4jCDh64o1WYrC3stGdk58mMRg69RT56svVrXVwu618f6szk2lj_Tqbt6b7Rg25y...

N/A N/A THN
NONE MALWAREBYTES:5E...

119 Edge extensions promised useful tools, instead downloaded malware_MALWAREBYTES:5E2D00C93323F5A75AF36EF6CFB363CE

Microsoft has removed 119 extensions from the Edge add-on store which were all tied to one adware campaign. In a paper titled "Inside StegoAd: How...

N/A N/A MALWAREBYTES
NONE MALWAREBYTES:96...

This pay gap is programmed (Lock and Code S07E13)_MALWAREBYTES:96EADF10EE66F0B65C337064887FDBE4

This week on the Lock and Code podcast… Pay is personal for plenty of Americans, but a new distribution model that consumes vast quantities of wor...

N/A N/A MALWAREBYTES
NONE HACKREAD:1F4F1C...

Amazon Kindle E-Reader: Worth It, and How to Afford More Books?_HACKREAD:1F4F1CB019EF597F0FA09362EE103D70

See whether an Amazon Kindle is worth buying, how it compares with other e-readers, and practical ways to read more books without overspending each...

N/A N/A HACKREAD
NONE THN:74266AD71CD...

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private_THN:74266AD71CD94FDB938D1893495B4069

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEio-ZtaOMuibm1cwTHj1YFNRqRbs2GdaipPSXv1pzX9qcUI2VS6MGjpxEcNnhU0zniwOokUFL530mntMPSO2X...

N/A N/A THN