Dirty Frag Won't Be The Last Exploit
CopyFail Compromises The Last 9 Years Of Linux Distros
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
Another Linux Distro Dropped Deepin Desktop
This Linux Bug Gives Attackers Root
IPv8 Changes Everything We Know About IP
…The tech giant previously indicated that the vulnerabilities published by the security sleuth weren't shared with the company in advance, as highlighted in its Coordinated Vulnerability Disclosure (CVD) policy. It also…
Back to Security Bulletins and Briefs AMD Server Software and Embedded Chipset Driver Vulnerabilities Identified in Windows® Environments Summary Researchers reported vulnerabilities within AMD Secure Processor (ASP) PCI, general-purpose input/output…
…to publish fake data breach disclosures Nottingham University data breach affects over 450,000 students Backup Customer Data Data Breach Electricity Energy Supplier Japan Physical Security Bill Toulas Bill Toulas is a…
…Driven Security Disclosures, NVIDIA Vera & Linux 7.1 Features That Made An Exciting May Servo 0.2 Released With Revamped Android Browser UI Rust Coreutils 0.9 Released With Additional Security Hardening…
https://securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
…We discussed one of many alerts on how the industry-standard 90-day vulnerability disclosure window is going the way of the dodo , too. Words are pretty, but programmers and politicians don…
…Blender 5.2 LTS Enters Beta With New Features AI-Driven Security Disclosures, NVIDIA Vera & Linux 7.1 Features That Made An Exciting May Servo 0.2 Released With Revamped Android Browser…
…The directive comes as private companies and governments have been scrambling to assess the extent of the cybersecurity reckoning that AI vulnerability and exploit development capabilities could unleash. “Prioritizing IT and security…
AMD has denied a security researcher a $10,000 bug bounty despite the individual's work and cooperation with the company. Regulars at this pub might remember an article a while back…
The NHS is (according to UK-based technologist and open-source advocate, Terence Eden) working on shutting down nearly all of its public source code repositories over security fears related to AI…
…Hunting for exploitation While our engineering team moved to a more targeted mitigation, our security investigation had been running since disclosure. This is our standard procedure for any critical vulnerability. Our security…
