Linux net/bluetooth
Bluetooth memory fix
We found and fixed a Bluetooth LE Audio lifetime bug in mainline Linux, where vendor and distro kernels inherit security updates.
Kernel commit AI hackers for enterprise.
We're a Swiss applied research lab, rebuilding cybersecurity for the AI era.
Anthropic Cyber Verification OpenAI Trusted Access Microsoft Security Advisors Program
Built for global enterprises and defense teams.
When failure is not an option, top engineers from all around the world review the vulnerabilities we find in open-source software and the Linux kernel.
NVIDIA IBM Intel Microsoft Meta Red Hat Google Qualcomm MediaTek Ericsson
import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none)
import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none)
import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none) import { verify } from "crypto" const token = req.headers.authorization if (!assertAccess(org)) return exec(`curl ${userInput}`) eval(serialize(body)) db.query(`SELECT * WHERE id=${id}`) fs.readFile(path.join(base, userPath)) child_process.spawn(cmd, {shell: true}) new Function(untrusted)() res.send(template(userHtml)) jwt.verify(tok, none)
paperclip·GHSA-47wq-cj9q-wpmpcriticaljsonata·GHSA-8gq3-vp5j-2grpcriticaljsPDF·CVE-2026-31938criticaljsPDF·CVE-2026-31898highnode-forge·CVE-2026-33896highprotobuf.js·CVE-2026-44289highyaml·CVE-2026-33532mediummysql2highLiquidJS·CVE-2026-30952highjsonata·CVE-2026-52746highUptime Kuma·CVE-2026-33130mediumWireshark·CVE-2026-15164mediumLinux · Bluetooth·mergedhighLinux · TIPC·mergedhighLinux · mac802154·mergedmediumLinux · mlx5e MACsec·mergedhighLinux · xen-blkfront·appliedmediumLinux · NFC LLCP·reportedhighLinux · NFC digital·reportedhigh
Let our army of AI agents hack your software, and secure it.
How we protect 3,533,070,480 installations.
End-to-end. On any software, black-box or white-box.
We break your software,
not your trust.
You set the rules
Every scan runs in an isolated sandbox, fenced to a scope you set — allowed hosts, rate limits, a kill switch. It can’t wander off-target.
Secrets stay sealed
Exploit proof exposes real secrets — we redact them and encrypt the rest per-org, opened only by you and logged on every access.
Your data stays yours
Strict per-org isolation. Your targets and findings never touch another customer — and never train someone else’s model.