… And it autonomously wrote a remote code execution exploit on FreeBSD's NFS server that granted full root access to unauthenticated users by splitting a 20-gadget ROP chain over multiple packets." Uh, thanks? ® anthropic software ai security
… His advice to developers is to focus more on security before code gets pushed and to pay closer attention to dependencies, so changes can be made quickly. He also argues that security patches should be done automatically, so people aren't left vulnerable because they forgot to accept an update. …
… MORE CONTEXT Salt Typhoon hit governments on three continents with SharePoint attacks Another massive security snafu hits Microsoft, but don't expect it to stick Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks Ransomware crims that exploited SharePoint 0-days add Velociraptor to… …
… Some attacks succeeded Ex-NSA cyber-boss: AI will soon be a great exploit coder OpenAI tries to build its coding cred, acquires Python toolmaker Astral Infosec community panics as Anthropic rolls out Claude code security checker Joyce quoted security researcher Sean Heelan, who analyzed OpenAI's th… …
… Of the eight critical-rated CVEs, two - CVE-2026-26110 and CVE-2026-26113 - are Office remote code execution bugs that can be triggered via the Preview Pane, meaning a user may not need to fully open a malicious file for an attacker to exploit the system. …
Security Ransomware crims abused Cisco 0-day weeks before disclosure, says Amazon security boss Interlock's post-exploit toolkit exposed Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a… …
Research State snoops and spyware vendors planting info-stealing malware on iPhones, Google warns Darksword is the second iOS exploit chain in a month A new exploit kit targeting iPhone users and stealing their sensitive data is being abused by "multiple" spyware vendors and suspected nation-state … …
… The latter had been exploited as a zero-day for months , and Adobe finally released a patch over the weekend. ® security patches patch management microsoft cybersecurity and infrastructure security agency cybercrime
… Memory corruption bugs like this can sometimes be abused by attackers to crash applications or run their own code if successfully exploited. …
… MORE CONTEXT Smooth criminals talking their way into cloud environments, Google says RSAC 2026: Uncle Sam backs out, and AI agents are everywhere Ex-CISA head thinks AI might fix code so fast we won't need security teams Protecting democracy means democratizing cybersecurity. …