Security research, engineering write-ups, and platform announcements from the Pragma Core team.
Inside the AI-offense era: autonomous systems like XBOW, Big Sleep, and Claude Mythos find and weaponize flaws in hours, while 28.3% of CVEs are exploited within 24 hours. Why periodic scanning fails, and what continuous AppSec must become.
Dirty Frag chains two Linux kernel LPE vulnerabilities (CVE-2026-43284 in IPSec ESP, CVE-2026-43500 in RxRPC) to achieve instant root on vir...
A regression in ASP.NET Core Data Protection broke HMAC validation, exposing apps to forged authentication cookies and padding oracle attack...
CVE-2026-41940 is a critical (CVSS 9.8) authentication bypass in cPanel and WHM that lets unauthenticated attackers gain root-level server a...
A logic flaw in the Linux kernel's crypto subsystem, dormant since 2017, now lets any unprivileged local user write into the page cache of f...
CVE-2026-3854 turned a single git push into RCE on GitHub.com and GitHub Enterprise Server. We break down what happened for executives, then...
AppSec teams have a math problem. Code ships faster than it can be reviewed, pentests are snapshots, and scanners are loud. Here is why we b...
Connect your repositories and let AI agents handle continuous scanning, research, and triage.
Choose which categories you are happy to allow. You can change your mind at any time using the Cookie settings link in the footer.