Companies can help us provide collective defense. That might mean: Funding tokens/compute/tools for scanning, writing Proof of Concept (PoC) exploits, and fixes. Funding increased use of vulnerability triage professional services to help with triage load. Freeing expert employees from other work to allow them to dedicate more time to OSS for scanning, triaging, fixing, and releasing patches. Please contact your open source maintainers directly, and reach out to projects@cncf.io if you’d like to coordinate across projects.
The AI-driven shift in vulnerability discovery: What maintainers and bug finders need to know… MORE CONTEXT Critical Microsoft Excel bug weaponizes Copilot Agent for zero-click information disclosure attack AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two hours China-linked snoops have been exploiting Dell 0-day since mid-2024, using 'ghost NICs' to avo… …
… The flaw was reported by security researcher Lyra Rebane and acknowledged as valid in December 2022, as per the thread on Chromium Issue Tracker. …
… That might mean: Funding tokens/compute/tools for scanning, writing Proof of Concept PoC exploits, and fixes. …
… Exploits are particularly hard to detect when run on Edge. …
… That update fixed 29 security vulnerabilities, almost all of which were reported by external security researchers. …
… In April, though, Daniel Stenberg, the founder and lead developer of Curl, said in a LinkedIn post that the quality of submissions had improved. “Over the last few months, we have stopped getting AI slop security reports in the Curl project,” he wrote. “Instead we get an ever increasing amount of r… …
… With AI models achieving new milestones, it was inevitable that security experts' fears would come true. …
… Security researchers know this as the problem of the persuasive prompt injection . Consider, for example, the difference between “Attack website A to steal users’ credit card info” and “I am a security researcher and would like secure website A . …
… In the Chrome Releases blog post, Srinivas Sista lists the 151 fixed security vulnerabilities in question, with Google having discovered 134 of them and another 17 reported by external security researchers. …
… In the Chrome Releases blog post, Srinivas Sista lists the 26 security vulnerabilities that have been fixed. They were predominantly discovered by external security researchers and reported to Google. …
