Posts

A roundup of 82 items curated from across the security community. News Active exploitation of a Cisco Catalyst SD-WAN auth bypass (CVE-2026-20182) by Cisco Talos. Talos is tracking in-the-wild exploitation of CVE-2026-20182, an authentication bypass in Cisco Catalyst SD-WAN Manager and Controller. Pwn2Own Berlin 2026: DEVCORE takes Master of Pwn by Dustin Childs. DEVCORE took Master of Pwn at Pwn2Own Berlin 2026, capping an event that paid $1,298,250 for 47 zero-days. Orange Tsai chained three bugs to RCE as SYSTEM on Exchange for $200,000. ...

A roundup of 44 items curated from across the security community. News Bleeding Llama: unauthenticated memory leak in Ollama (CVE-2026-7482). Cyera Research uncovers a critical pre-auth memory disclosure in Ollama. Self-hosted LLM gateways leak adjacent buffer contents to anyone who can hit the API. More this week (2) RansomHouse claims Trellix source-code breach by BleepingComputer. Zara data breach exposed 197,000 people by BleepingComputer. Techniques and Write-ups MariaDB CVE-2026-32710 deep dive: character-constrained overflow to RCE by kmkz. Tim Becker walks through the heap-grooming primitive Xint used to turn a character-constrained heap overflow in JSON_SCHEMA_VALID into full RCE. ZeroDay Cloud’s deep dive on the bug behind GHSA-4rj5-2227-9wgc. ...

A roundup of 54 items curated from across the security community. News Apache ActiveMQ CVE-2026-40466 exploited in the wild by kmkz. VulnCheck sees CVE-2026-40466 burning in active campaigns: authenticated RCE in ActiveMQ via the vm:// protocol, a bypass of the original CVE-2026-34197 fix. 2,700+ exposed instances on Shodan. Mythos: a long-form look at the stakes, impact, and PR by Kuba Gretzky. Ivan Kwiatkowski’s deep-dive cuts through weeks of hot takes about Anthropic’s Mythos: what the actual capability claims are, what they mean for the bug-finding economy, and what the rollout did to industry trust. ...

A roundup of 189 items curated from across the security community. News Claude Mythos Has Found 271 Zero-Days in Firefox by Bruce Schneier. 271 Firefox bugs found by Claude Mythos in collaboration with Mozilla. Schneier breaks down the disclosure and what it means for browser security at scale. Defender for Endpoint: restrict response actions on high-value assets by Sean Metcalf. Defender for Endpoint adds a public preview to restrict live response actions on high-value assets. The control SOC analysts running scripts as SYSTEM on tier 0 boxes have been asking for. ...

Welcome aboard. Crow’s Nest is a curated roundup of security news, techniques, tools, and exploits, published by Black Lantern Security. What You Can Expect Each edition will cover: News: meaningful security news from across the community. Techniques and Write-ups: interesting research, blog posts, and analyses. Tools and Exploits: new offensive and defensive tooling, PoCs, and exploits. An editor reads and selects every item that lands here. Automation handles the heavy lifting of scraping feeds and keeping tabs on the community, but every post is curated by hand. New editions land when there is enough worth covering, not on a fixed schedule. ...