Find more exploitable vulnerabilities over lunch without relying on Mythos.https://nebusec.ai/https://nebusec.ai/research/v8-cve-2026-6307-writeup/https://nebusec.ai/research/v8-cve-2026-6307-writeup/Chrome V8 JavaScript engine features a heap sandbox to prevent an attacker from writing outside of the sandbox region with only a vulnerability in their JavaScript engine. However, VEGA discovered a special bug in the JIT compiler that allows an attacker to gain arbitrary read/write primitives in sandbox and even escape the sandbox to write outside of it solely on its own. This writeup will cover the technical details of the vulnerability.Mon, 29 Jun 2026 00:00:00 GMThttps://nebusec.ai/research/v8-maglev-incorrect-phis-untagging/https://nebusec.ai/research/v8-maglev-incorrect-phis-untagging/In March, our system detected a severe vulnerability in V8, the JavaScript engine used by Chrome. This vulnerability enabled remote code execution against billions of Chrome users worldwide.Thu, 07 May 2026 00:00:00 GMThttps://nebusec.ai/research/cve-2026-23274-cos/https://nebusec.ai/research/cve-2026-23274-cos/Our AI security research pipeline discovered a critical vulnerability in Linux kernel. This post covers the discovery and exploitation of CVE-2026-23274, a Linux netfilter bug that led to kernelCTF code execution.Tue, 14 Apr 2026 00:00:00 GMT