Contributors: Sandeep Kamble, BugDazz Autonomous Pentest AI, Rabit0 ModelPublication Date: March 19, 2026Severity Rating: High (CVSS Score: 8.8)Vulnerability Status: Zero-day at time of discovery A financial services firm was […]
On January 27, 2026, Aikido Security flagged a VS Code extension called “ClawdBot Agent” — a fully functional AI coding assistant that silently drops a ScreenConnect […]
The IPVanish VPN application for macOS contains a critical privilege escalation vulnerability that allows any unprivileged local process to execute arbitrary code as root without user […]
A Critical-severity Unsafe Protocol Handling flaw affecting DeepChat, a popular open-source Electron-based AI chat desktop application. The issue resides in the application’s preload script at src/preload/index.ts, […]
Software supply chain failures didn’t appear overnight in 2025. They’ve been quietly accumulating for years, hidden behind trusted frameworks, familiar libraries, and automated build pipelines. What […]
Authors: BugDazz AI Research TeamPublication Date: February 04, 2026Severity Rating: Critical (CVSS Score: 9.4)Vulnerability Status: Zero-day at time of discovery We discovered a critical vulnerability in […]
Firewalls are the first line of defense against unauthorized access and cyberattacks, but even the most advanced configurations can contain overlooked rules or misconfigured ports that […]
As organizations expand their digital ecosystems across cloud, SaaS, and hybrid environments, managing user access has become increasingly complex. Granting excessive permissions can expose sensitive data, […]
APIs power modern applications, connecting systems and enabling new features. But every API is also a potential entry point for attackers. OWASP’s API Security Top 10 […]