Vulnerabilities Microsoft Patches Office Zero-Day Likely Exploited in Targeted Attacks The vulnerability is tracked as CVE-2026-21509 and it can be exploited to bypass security features. Eduard KovacsJanuary 27, 2026
Endpoint Security UEFI Vulnerability in Major Motherboards Enables Early-Boot Attacks ASRock, Asus, Gigabyte, and MSI motherboards are vulnerable to early-boot DMA attacks. Eduard KovacsDecember 18, 2025
Cloud Security AWS Trusted Advisor Tricked Into Showing Unprotected S3 Buckets as Secure AWS has addressed a vulnerability that could have been leveraged to bypass Trusted Advisor’s S3 bucket permissions check. Eduard KovacsAugust 22, 2025
Vulnerabilities Radware Says Recently Disclosed WAF Bypasses Were Patched in 2023 The Radware Cloud WAF product vulnerabilities disclosed by CERT/CC were addressed two years ago. Eduard KovacsMay 13, 2025
Vulnerabilities Copy2Pwn Zero-Day Exploited to Bypass Windows Protections ZDI details a zero-day named Copy2Pwn and tracked as CVE-2024-38213, which cybercriminals exploited to bypass MotW protections in Windows. Eduard KovacsAugust 16, 2024