Dirty Frag Won't Be The Last Exploit
CopyFail Compromises The Last 9 Years Of Linux Distros
The First Exploit - Pwn2Own Documentary (Part 2)
The World's Hardest Hacking Competition - Pwn2Own Documentary (Part 1)
Another Linux Distro Dropped Deepin Desktop
This Linux Bug Gives Attackers Root
IPv8 Changes Everything We Know About IP
…Meta says that this won't be the case for its incognito mode. "Your messages are processed in a secure environment that even Meta cannot access. Your conversations are not saved, and…
CSO Lightning-fast exploits make it essential to patch fast, ask questions later Here's where you ought to spend your security billable hours budget this year Strengthen your MFA policies, double…
…remind employees NOT to store workplace credentials in browsers or password vaults secured with personal credentials. ® vpn security microsoft cybercrime cyber-crime
…Securities and Exchange Commission (SEC) for $1.5 million over his delayed disclosure of a major stake in Twitter. 2 VIEW GALLERY - 2 IMAGES The agreement, reached without Musk admitting fault, marks…
https://securityaffairs.com/193128/security/researcher-drops-a-new-vs-code-zero-day-after-losing-trust-in-microsofts-disclosure-process.html
This one has been building for a month and it came to a head this week. A researcher going by Chaotic Eclipse has released six Windows zero-days publicly over the past several weeks, covering Defender, BitLocker, and Win…
The traditional vulnerability disclosure timeline relies on a fundamental assumption: exploit development and vulnerability discovery take time. Over the last 12 months the integration of LLMs into offensive tooling has …
Disclosure: I work on Forkline, which maintains a fork of the retired Kubernetes ingress-nginx controller. NGINX published a security advisory for ngx_http_rewrite_module. The affected versions are NGINX Open Source belo…
TL;DR: If you are running NGINX Open Source below 1.30.1 or 1.31.0, you are affected by the current ngx_http_rewrite_module CVE batch. For Kubernetes ingress-nginx users this is especially relevant — the retired controll…
The Securities and Exchange Commission officially proposed last week to weaken the quarterly reporting standards for publicly traded companies. So far, public comments submitted to the financial regulator about the idea are…
…While vulnerabilities eventually get fixed, that usually happens only after security researchers discover them — bad actors can misuse them before disclosure to target high-risk individuals and compromise their security and privacy…
…rooted security – Canonical assumes Manufacturer responsibilities under the CRA for the operating system’s release cycle by providing security maintenance for its core modules, continuous CVE monitoring and coordinated disclosure, and compliance…
…locking out AMD to secure total Intel exclusivity, delaying the purchase or use of AMD microprocessors, limiting, delaying or constraining marketing, promotion, launch, advertising, production, distribution, sale or branding of any product…
Security Gartner suggests Friday afternoon Copilot ban because tired users may be too lazy to check its mistakes Admins may be even more exhausted by then, because securing Microsoft’s AI helper…
…coordinated vulnerability disclosure, the process of giving developers time to patch a bug before it is publicly discussed. “We've seen Mythos Preview accomplish things that a senior security researcher would be…