Hacker Blogs
Work in progress: 181,232 of 181,233 sites checked so far, more every week · updated 2 Nov 2026Missing a blog? Tell us

Top all-time · #11347

N

NebuSec

Company blog · nebusec.ai/researchsecurity

NebuSec is the company blog at nebusec.ai, writing about security. Since 2026, 7 different Hacker News readers have linked it 9 times, most often “We won $92,337 bug bounty using a single kernel 0-day”. It is still writing: the last post was on 2026-10-21, and you can follow it by feed.

Visit the blog
9mentions?
7HN people?
2026–2026first – last linked?

Too few sampled comments (5) to say how often HN recommends it.?

Why HN links it

HN readers link NebuSec's security research write-ups on the IonStack exploit chain, combining a Firefox IonMonkey 0-day with the GhostLock Linux kernel 0-day, plus related CVE details and mitigations.

Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.

NebuSec builds Nebu, an AI security platform for continuous code and cloud protection, backed by researchers who find zero-days in Chrome and Linux.

Most-linked posts?

  1. We won $92,337 bug bounty using a single kernel 0-day
    4 people · 6 mentions · first linked 2026-07-08

What Hacker News says?

  1. rvz · 2026-07-13
    CVE-2026-53359 - https://github.com/V4bel/Januscape/blob/main/assets/write-up... CVE-2026-43499 - https://nebusec.ai/research/ionstack-part-2/

    Comment linking /research/ionstack-part-2/

    on “Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop”
  2. etenal · 2026-07-08

    Submitted We won $92,337 bug bounty using a single kernel 0-day as a story · 4 points

    HN discussion
  3. IIsi50MHz · 2026-07-12
    See also https://nebusec.ai/research/ionstack-part-2/#mitigation for the fullpatch and two other mitigations

    Comment linking /research/ionstack-part-2/

    on “We won $92,337 bug bounty using a single kernel 0-day”
  4. ranger_danger · 2026-07-08

    Submitted GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years as a story · 3 points

    HN discussion
  5. etenal · 2026-07-08
    Read our technical walkthrough here to see how we won almost $10k bug bounty from a single Linux kernel 0-day -- GhostLock. Chaining GhostLock with a Firefox 0-day, we managed to remote control any Android device (even the latest Android 17) from a simple URL click. We name this full-chain exploit "IonStack", because it's IonMonkey 0-day in Firefox and a StackOverflow in Linux kernel. Our blog post -> https://nebuse…

    Comment linking /research/ionstack-part-2/

    on “We won $92,337 bug bounty using a single kernel 0-day”
  6. jinqueeny · 2026-10-23

    Submitted Investigating the PingCAP Security Incident as a story · 2 points

    HN discussion
  7. ActorNightly · 2026-07-14
    No, GhostLock is not browser to Kernel. https://nebusec.ai/research/v8-maglev-incorrect-phis-untaggi... This is the browser part.

    Comment linking /research/v8-maglev-incorrect-phis-untagging/

    on “GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years”
  8. djfergus · 2026-07-10

    Submitted GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years as a story · 2 points

    HN discussion
  9. ranger_danger · 2026-07-08
    Could also be https://nebusec.ai/research/ionstack-part-2/

    Comment linking /research/ionstack-part-2/

    on “HPCs taken offline due to a serious security vulnerability”

Search all of HN for nebusec.ai

Linked by the same people?