Dirty Frag Won't Be The Last Exploit
CopyFail Compromises The Last 9 Years Of Linux Distros
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
Another Linux Distro Dropped Deepin Desktop
This Linux Bug Gives Attackers Root
IPv8 Changes Everything We Know About IP
…Developing technologies that endeavor to support robust security and privacy is a priority for Qualcomm Technologies. We commend the researchers from the Xiaomi ShadowBlade Security Lab for using coordinated disclosure practices. Regarding…
…vm/drop_caches; true" These disclosures follow recent reports that attackers are now actively exploiting the Copy Fail vulnerability in the wild. The Cybersecurity and Infrastructure Security Agency (CISA) added Copy Fail…
…The firm says it reported its findings to Apple Product Security before publication and worked with Apple on coordinated disclosure. The full proof-of-concept code has been published alongside the write…
…Explore our GitLab Security and Governance Solutions and security scanning documentation to start strengthening your security posture today. More to explore Security Full security scanner coverage of your codebase in minutes Security…
https://securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
…Over half of respondents believe that AI-assisted contributions should always require formal disclosure (such as an “AI-authored” tag). An additional 20% feel disclosure should be required in specific cases. This…
…The disclosures show how SpaceX took on new financial and reputational risks when it acquired Elon Musk’s artificial intelligence startup xAI in February, a deal which sent the rocket maker’s…
…AI-Driven Security Disclosures, NVIDIA Vera & Linux 7.1 Features That Made An Exciting May Servo 0.2 Released With Revamped Android Browser UI Rust Coreutils 0.9 Released With Additional Security…
…Meta says that this won't be the case for its incognito mode. "Your messages are processed in a secure environment that even Meta cannot access. Your conversations are not saved, and…
CSO Lightning-fast exploits make it essential to patch fast, ask questions later Here's where you ought to spend your security billable hours budget this year Strengthen your MFA policies, double…
…While vulnerabilities eventually get fixed, that usually happens only after security researchers discover them — bad actors can misuse them before disclosure to target high-risk individuals and compromise their security and privacy…
