The bug apocalypse continues...

Catalin Cimpanu@campuscodi.risky.biz · 2w ago

Oracle patched 1,449 vulnerabilities in the July quarterly security patches Dear lord... www.oracle.com/security-ale...

#Pwn2Own Ireland returns for 2026! We've got lot's of targets and plan on lot's of good times on the Emerald Isle. We've got a new registration process, so please read the rules carefully to know what to expect. Check it out at www.zerodayinitiative.com/blog/2026/7/... #P2OIreland

Zero Day Initiative — Pwn2Own Ireland 2026 – New Targets and Categories

If you just want to read the rules, you can find them here .   Pwn2Own Ireland returns for 2026, and it’s the third year for this event in the Emerald Isle. Despite the dreary Irish skie...

zerodayinitiative.com

Christmas in July at the Sounds game

None under active or publicly known.

The Dustin Childs@dustinchilds.bsky.social · 3w ago

As if Tuesday wasn't enough, #Microsoft released 4 more patches yesterday: CVE-2026-56171: RDP Information Disclosure Vulnerability CVE-2026-58598: Backup Service EoP Vulnerability CVE-2026-58643: Admin Center Spoofing Vulnerability CVE-2026-59117: Windows Terminal RCE Vulnerability

As if Tuesday wasn't enough, #Microsoft released 4 more patches yesterday: CVE-2026-56171: RDP Information Disclosure Vulnerability CVE-2026-58598: Backup Service EoP Vulnerability CVE-2026-58643: Admin Center Spoofing Vulnerability CVE-2026-59117: Windows Terminal RCE Vulnerability

And don't miss the CVSS 9.8 RCE bug in the Minecraft Bedrock Dedicated Server. Yes - Microsoft released a security patch for Minecraft! msrc.microsoft.com/update-guide...

Wait - there are how many #Microsoft patches?? More than 600??!? Great googly moogly. Uh.... I'll have my thoughts out soonish. Yikes. Welcome to the bug apocalypse.

#Adobe releases 12 bulletins covering 88 CVEs. Nothing from #Microsoft yet. Why is my spidey sense tingling?

#Adobe is moving to a twice-monthly patch release as a result of frontier AI models finding bugs. Today, they released two Priority 1 patches for Cold Fusion and Campaign Classic (CVSS 10!). Neither under active attack. Read the announcement at

Protecting customers faster: How Adobe is responding to AI-accelerated vulnerability discovery | Adobe Security Blog

Effective July 14, 2026, Adobe is moving from monthly to twice-monthly publication of Adobe Security Bulletins and Advisories on the second and fourth Tuesday of each month.

blog.adobe.com

How can you not be romantic about baseball? Go Sounds!

I had an amazing time talking with Chompie during #Pwn2Own Berlin. Her insights into AI assisted vulnerability development are not to be missed. Check out our podcast here or wherever you get yours thecyberwire.com/podcasts/ai-...

Can Agentic AI Really Find Zero-Days? Ask the Hacker Who Won Pwn2Own Berlin 2026

At Pwn2Own Berlin 2026, a security researcher used agentic AI to help her win. The AI surfaced real, verified bugs, then wrongly called her winning bug “not unexploitable in practice.” Spoiler - it was.That uneven record is exactly what security leaders need to understand about the promise and limits of agentic AI. In this episode, host Dustin Childs sits down with Valentina Palmiotti – better known as Chompie – who took home $70,000 for zero-days in the NVIDIA Container Toolkit and Red Hat Enterprise Linux. Drawing from firsthand experience, Chompie shares agentic AI’s proven value for defenders and why human expertise remains essential.

thecyberwire.com

Well that's odd. #Adobe released an out-of-band update for the Adobe DNG Software Development Kit (SDK), but they say there are no active attacks, and the deployment priority is 3. Four CVEs - one Critical. Check it out at helpx.adobe.com/security/pro...

Any night at the ballpark is a good night. Let’s go Sounds!

Back to my happy place. Time to grab a hotdog and a beer. Go Sounds!

Oracle has released an out-of-band security alert for an unauth RCE in PeopleSoft CVE-2026-35273 www.oracle.com/security-ale...

We've updated the look and feel of our website. The blog is under maintenance for now but will be up soon. Let us know if you find any bugs or issues. www.zerodayinitiative.com

It's the bug of the month for June 2026! CVE-2026-45657 - A CVSS 9.8 vulnerability in Kernel that allows remote, unauthenticated code execution at SYSTEM without user interaction. Yikes!

No time to read the blog? Check out the Patch Report for June 2026. @dustinchilds.bsky.social breaks down this massive release and provides guidance on where to focus your resources. youtu.be/DEGxRsjwUaI

The Patch Report for June 2026

YouTube video by TrendAI Zero Day Initiative

youtu.be

Wow. Over 200 CVEs from #Microsoft and another 123 from #Adobe. It's a record-setting Patch Tuesday, but fear not! @dustinchilds.bsky.social has broken the release down and provides the details. Check out the blog athttps://www.zerodayinitiative.com/blog/2026/6/9/the-june-2026-security-update-review

Zero Day Initiative — The June 2026 Security Update Review

I’ve made it through Pwn2Own Berlin, had a little vacation, and now I’m back for Patch Tuesday. Microsoft and Adobe didn’t disappoint. In fact, they have heralded my return with the largest Patch Tues...

zerodayinitiative.com

What do you mean there are over 200 #Microsoft CVEs in the June Patch Tuesday release??1? Let me go look. I'll have my thoughts out soon.

If you’re at Animal Kingdom, don’t pass up on Tiffin’s. Pricey yes, but probably the best dining experience in the parks. The pork duo tasted even better than it looks.

Dole whip on a hot day. Gotta love it.

Midnight Mickey beignets. Is ther anything better on the first night of vacay?

Pwn2Own Berlin 2026 is in the books, and it was an amazing contest from start to finish. We awarded $1,129,250 for 47 unique 0-days. Join @dustinchilds.bsky.social and Vincent Lee as they recap the highlights and offer a preview of what's to come. youtu.be/SqeskOpUPQU

Wrapping Up Pwn2Own Berlin 2026: The Final Numbers

YouTube video by TrendAI Zero Day Initiative

youtu.be

In a video highlight from Day Two, @orange_8361 of @d3vc0r3 exploits #Microsoft #Exchange with a little help from AI. He earns $200,000 and 20 Master of Pwn points. youtube.com/shorts/cq0he... #Pwn2Own #P2OBerlin

Pwn2Own Berlin 2026 Day 2 - DEVCORE vs Microsoft Exchange

YouTube video by TrendAI Zero Day Initiative

youtube.com

Wow - #Microsoft releases an emergency patch for an Exchange spoofing bug in the wild. Looks like it's confined to OWA and Preview Pane is NOT a vector. Still, start your test and deployment engines! msrc.microsoft.com/update-guide...

He says to blame the delay on jet lag, but @dustinchilds.bsky.social has his full review of the #Adobe and #Microsoft patches. Nothing under active attack, but a total of 190 CVEs to look at (plus 120+ from Chrome recently!) read the details at www.zerodayinitiative.com/blog/2026/5/...

Zero Day Initiative — The May 2026 Security Update Review

I’m currently in Berlin helping set up for Pwn2Own Berlin, but that doesn’t stop Patch Tuesday from coming, and it’s another big one. At least nothing is listed as being in the wild – for now. Take a ...

zerodayinitiative.com

Wow - another 130+ CVEs from #Microsoft and 10 bulletins from Adobe. Lots of patches right before #Pwn2Own Berlin. I'm sorting through everything and should have my analysis out soon - without the benefit of AI ;-]

In a new feature, @dustinchilds.bsky.social takes a look at #macOS patches and tries to identify which ones should worry you (since Apple won't). Check it out at www.zerodayinitiative.com/blog/2026/5/...

Zero Day Initiative — The Apple macOS Security Update Review

We’ve received some feedback from those who read the Patch Blog that they would like something similar for macOS updates. Unfortunately, Apple doesn’t schedule these for a particular day, but we can p...

zerodayinitiative.com

We're less than 24 hours from the close of registration for #Pwn2Own Berlin! Get your submissions in while you still can.