Search: security and bugs

Linus Torvalds says flood of duplicate AI-generated vulnerability reports have made Linux security mailing list 'almost entirely unmanageable' — private list 'a waste of time for everybody involved' in switch to new public system

… The problem, according to Torvalds, is the combination of volume and redundancy: multiple researchers are independently discovering identical bugs using automated tools and filing them separately on a private mailing list, where nobody can see what has already been submitted. …

May 18, 2026 · Luke James

Standard 90-day vulnerability disclosure policy is likely dead thanks to AI, expert warns that AI can weaponize patches in 30 minutes — LLM-assisted bug-hunting ushers in a new cyberworld order

… The vast majority of security exploits are rooted in specific bad programming habits, something a bot excels at noticing quickly and repeatedly. …

May 12, 2026 · Bruno Ferreira

First Apple M5 memory exploit discovered using Anthropic AI, gives root access on MacOS — Claude Mythos helps security researchers bypass Memory Integrity Enforcement

… Calif published the vulnerability overview as part of a series of blog posts called the Month of AI-Discovered Bugs, since this new Apple vulnerability falls within a set of security findings aided by AI tools — in this case, Anthropic's Mythos Preview. …

May 16, 2026 · Bruno Ferreira

Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

… Additionally, the Redmond firm had allegedly already deleted the Microsoft account Eclipse used for reporting the bugs. …

May 27, 2026 · Bruno Ferreira

CISA flags actively exploited ‘Copy Fail’ Linux kernel flaw enabling root takeover across major distros — unpatched systems may remain vulnerable to attack

… Cybersecurity and Infrastructure Security Agency CISA added a newly disclosed Linux vulnerability, dubbed “Copy Fail,” to its Known Exploited Vulnerabilities catalog on May 1st, warning that the flaw, tracked as CVE-2026-31431, is already being used in active attacks and urging rapid patching acros… …

May 4, 2026 · Etiido Uko

AMD GPU owners take to Reddit to report fan problem with driver update

… That means missing out on new features, optimizations, or security updates introduced in the latest releases, though. …

May 14, 2026 · Zhiye Liu

AI shrinks zero-day exploit time from a year to a single day, heading toward one minute — Zero-Day Clock warns security window has collapsed

… The biggest recommendation is to make software makers liable for damaging security vulnerabilities, as well-known cybersecurity master Bruce Scheiner explains: "No industry in the past 150 years has improved safety or security without being forced to by the government." He additionally points out t… …

May 26, 2026 · Bruno Ferreira

Software News, Analysis and Features | Tom's Hardware

… Freedman Published 22 February 23 Search Engines Erasing Authors, Google and Bing’s AI Bots Endanger Open Web By Avram Piltch Published 8 February 23 Search Engines China Blocks Bing Despite Microsoft's Censorship Compliance By Lucian Armasu Published 24 January 19 Search Engines Security Software …

May 18, 2026

Outlook may have allowed unencrypted connections for decades, report claims — Fedora and Dovecot upgrade reveal protocol downgrade issue present since at least 2007

… Worst of all, seemingly everyone actually had the "Use TLS/SSL" checkbox enabled, meaning that protocol security had been downgraded silently all along. …

Jun 5, 2026 · Bruno Ferreira

Wide-ranging 7-zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at risk

There seems to be no end in sight for serious, wide-ranging security vulnerabilities these days. …

May 28, 2026 · Bruno Ferreira

Followed topics