I Built an AI Cybersecurity Research Factory (for CTFs & Vulnerabilities)
This Linux Bug Gives Attackers Root
KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News
Before You Trust Another Self-Hosted App, Watch This
AI Is Hacking Everything Now...
Reinventing Web Security
The Supply Chain Attacks All Have One Thing in Common. It's GitHub.
Security-driven Rapid Release - Pwn2Own Documentary (Part 4)
A Vulnerability to Hack The World - CVE-2023-4863
Mythos unleashed on Opensource
Linux Weekly News: AI invades Kwin, Lutris & AMD drivers, SUSE could be sold
An initiative to secure the world's software | Project Glasswing
…find security vulnerabilities for them, like an example prompt that instructs the AI to pretend it’s a security expert. Hackers are also feeding AI models whole repositories of vulnerability data and…
…Nightmare-Eclipse adds that, as far as their testing is concerned, the vulnerability only appears to be present in Windows 11. The security researcher describes it as "one of the most insane…
…Progress on software security used to be limited by how quickly we could find new vulnerabilities. Now it’s limited by how quickly we can verify, disclose, and patch the large numbers…
…All of the other IDEs and vendors – including Google, Microsoft, and Anthropic – said this was a known issue, or not a valid security vulnerability because it requires explicit user permission to modify…
Another Linux vulnerability in the same category as Dirty Frag has been found! Another eight of these more I guess? In any case the fatigue is coming up for me. Things are getting crazy! "It abuses a logic bug in the Lin…
Security fixes This release contains security fixes for the following advisories. We strongly advice to update as soon as possible. SSO Login CSRF - GHSA-pfp2-jhgq-6hg5, GHSA-w6h6-8r66-hcv7 User/Organization Enumeration …
If Firefox is any indication, the new AI discovers two years' worth of vulnerabilities in a short period of time. Firefox seems to be an early adopter of this technology, but we should see a huge flux of newly discovered…
CopyFail just dropped, it's a new Linux kernel vulnerability that gives attackers root privileges. https://arstechnica.com/security/2026/04/as-the-most-severe-linux-threat-in-years-surfaces-the-world-scrambles/ Debian ha…
This is part of the dirtyfrag family, but is different enough to warrant its own CVE. https://www.bleepingcomputer.com/news/security/new-fragnesia-linux-flaw-lets-attackers-gain-root-privileges/ Known as Fragnasia and tr…
…critical vulnerability that can allow hackers to breach the servers running them and make off with sensitive data and credentials to third-party accounts, a security researcher is warning. The vulnerability is…
…Most security leaders share the same suspicion: there are vulnerabilities in our codebase that we don’t know about. The uncomfortable truth is that most code never gets a thorough security review…
…The Cloud Security Alliance released an expedited strategy briefing on developing a “Mythos-ready” security plan detailing many of these concepts. The report also emphasized the need to not only patch vulnerabilities…
…However, Dirty Frag works by chaining two separate kernel flaws, the xfrm-ESP Page-Cache Write vulnerability ( CVE-2026-43284 ) and a RxRPC Page-Cache Write security issue ( CVE-2026-43500 ), to…
…Microsoft describes this security flaw (CVE-2026-42897) as a spoofing vulnerability affecting up-to-date Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition (SE) software. While patches aren…
Devops Using AI to code does not mean your code is more secure Use of AI coding assistants has surged, but so has the number of vulnerabilities in AI-generated code As…
