An analysis of the patch diff for an unauthenticated remote code execution vulnerability in WordPress core, with a three-step practical reproduction.
The number of CVEs fixed in Microsoft's October Patch Tuesday sets another record, as AI accelerates vulnerability discovery.
An analysis of code completion poisoning and terminal command injection risks facing AI coding assistants.
Docker fixes a high-severity vulnerability that persisted in Docker Hub for two years and allowed attackers to push images under others' identities.
A stale IOTLB cache vulnerability in Linux vhost can allow local privilege escalation and virtual machine escape.
The tool uses a lightweight on-device Gemma model to block scams in private chats without sending data to the cloud.
FreeBuf's morning briefing covers frontier AI models breaking into industrial control systems and researchers bypassing mainstream AI agent frameworks.
Microsoft has released a patch for a remote code execution vulnerability in Visual Studio Copilot.
A Connect Secure vulnerability allows unauthenticated remote code execution, potentially giving attackers elevated privileges.
Block shares how it uses OpenAI to identify and remediate security risks.
A context-aware classifier increased the weighted acceptance rate by 11.5% and reduced median scan execution time by 86%.
The piece introduces Gemini 4 Argon's use in defending against cyberattacks.
The article discusses AI's impact on open-source security workflows, citing an attack that emerged soon after a vulnerability fix was submitted.
AIR found a network filtering flaw in Vercel Sandbox that lets agents exfiltrate data through certificate validation.
Nix and Lix jointly disclose multiple vulnerabilities that can be chained to gain local root privileges.
An agent executed the task, but the audit trail cannot identify who requested it.
The article explores Anthropic's roles as auditor and vendor, and who bears the costs of its free open-source vulnerability scans.
A validation flaw in trusted publishing exposes more than 1500 packages to supply chain attacks.
The article explores the potential impact on Sony's console ecosystem after all PS5 models were compromised through a low-level vulnerability.
Gates identifies cyberattacks as the most urgent threat posed by AI.
Trezor will reduce its reseller network to strengthen partner vetting; there is currently no evidence that devices have been compromised.
Under certain conditions, these vulnerabilities could be exploited to execute code and steal data.
Local media report that three poorly secured accounts at a small IT company were abused, involving access to the national registry system.
The article documents an attack that began with a database record and successively breached multiple permission layers.
Live counterattack experiments target automated AI penetration-testing agents and explore what WAF could become next.
A supply chain security audit documents 6 real-world vulnerability patterns identified by 8 rules.
The Trump Organization's mobile network company was attacked, exposing the personal information of 3615 users.
A vulnerability in the CI/CD regex compiler on self-hosted instances lets remote attackers execute arbitrary code on the server.
Some refrigeration units were turned up to 50°C, causing food spoilage and fires.
The article reveals security vulnerabilities in Danfoss refrigeration controllers.