Policy and Disclosure: 2026 Edition

ZDI-26-976: llama.cpp GGUF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-975: llama.cpp GGUF File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-974: PostgreSQL pg_stat_statements Extension Heap-based Buffer Overflow Remote Code Execution Vulnerability

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)

ISC Stormcast For Friday, November 13th, 2026 https://isc.sans.edu/podcastdetail/10178, (Fri, Nov 13th)

VU#644655: TightVNC and UltraVNC Viewer contains a heap-based buffer overflow

The Binance Aftershocks: Tracking the Nearly 130% Spike in Crypto Impersonation Scams

New York City votes to ban surveillance pricing

KnowBe4 and AWS: Behind Every AI Advancement Is Strong Collaboration

Google pushes second Chrome update this week