Google rushes Chrome update to fix zero-days under attack
… The company also revealed this week that it paid $17 million to 747 security researchers through its Vulnerability Reward Program in 2025. …
Search
Fake Linux Foundation leader using Slack to phish devs
… MORE CONTEXT Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack 1… …
Anthropic, Google, Microsoft paid AI bug bounties – quietly
… Claude Code Security Review Guan originally found the flaw in Claude Code Security Review. This is Anthropic's GitHub Action that uses Claude to analyze code changes and pull requests for vulnerabilities and other security issues. …
AI agents are 'gullible' and easy to turn into your minions
… Earlier this month, Zenity disclosed a family of vulnerabilities that allowed attackers to steal local files from someone using Perplexity's Comet browser simply by sending the victim a calendar event. …
VS Code goes weekly, gets AI autopilot - what could go wrong
… "This is extremely dangerous and is never recommended … this feature disables critical security protections," it says. …
Google: Spyware vendors, China-linked spies led 0-day abuse
… Google 11 and Apple 8 round out the top three. ® cybercrime security ciso google cloud
Cryptographers place $5,000 bet whether quantum will matter
… The clock is ticking. ® encryption quantum computing software security
Voice phishing skyrockets as smooth crims talk their way in
… Exploiting vulnerabilities topped the charts for a sixth year, accounting for 32 percent of successful attacks. …
Linux kernel czar says AI bug reports aren't slop anymore
… Greg, who lives in the Netherlands these days, was there to briefly comment on AI, Linux, and security. We spoke about how, over the last month, AI-driven activity around Linux security and code review has "really jumped" in a way no one in the open source world saw coming. …