Latest articles and insights
SimplyProxies — our UK mobile proxy service. Real 4G/5G devices, pay-as-you-go from £2/GB. Free 500 MB trial, no card.
A 200-byte Package URI, a 128-byte buffer, and an memcpy that copies exactly the destination size — the recipe for a silent memory leak out of a few hundred million IoT devices. No NUL terminator, no crash, no obvious overflow. Just a slow bleed of function pointers and DTLS sec…
On July 7, 2026, Samsung published its monthly Mobile Security Bulletin for Android applications. Buried in the “Moderate” row was SVE-2026-0917, assigned CVE-2026-21055 by NIST: an improper export of Android application components in Bixby — Samsung’s voice as…
On June 30, 2026, NIST’s National Vulnerability Database published CVE-2026-58116, a critical remote code execution vulnerability in LLaMA-Factory, the open-source LLM fine-tuning framework that has quietly become a piece of critical infrastructure for the AI industry. Wit…
On June 23, 2026, NIST’s National Vulnerability Database published CVE-2026-48020, a route-level authentication and authorization bypass in Traefik, the cloud-native reverse proxy and ingress controller that fronts a huge slice of the modern web (and most Kubernetes cluste…
On June 15, 2026, a critical vulnerability was disclosed in AshAuthentication — the authentication extension for the Ash Framework in Elixir — that allows an unauthenticated attacker to take over any local user’s account through the OAuth2 or OpenID Connect sign-in flow. T…