In 2021, a vulnerability was revealed in a system that lay at the foundation of modern computing. An attacker could force the…
News
Metabase SQLi exploit grants attackers total access
Business intelligence (BI) platform provider Metabase has disclosed a zero-day SQL Injection vulnerability, warning that customers’ sensitive credentials, tokens, API keys, and…
Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability
A currently exploited zero-day elevation of privilege vulnerability that needs to be patched in a Windows driver for WinSock is the highlight…
Zoom zero-click RCE flaws allow attackers to compromise meeting participants
Zoom has fixed four vulnerabilities across its applications, including two that could allow attackers who join a meeting to execute malicious code…
GitHub already has an EDR. You just have to listen to it
Many of the recent supply-chain attacks could have been caught earlier if defenders looked closely at the telemetry GitHub already provides, researchers…
OpenAI launches GPT-5.6-Cyber as AI narrows vulnerability response window
OpenAI has expanded its Daybreak cybersecurity program and introduced GPT-5.6-Cyber, a specialized model for approved security researchers, as the company warned that…
Security leaders’ rogue AI confidence could actually be disastrous
A large majority of IT and security leaders are confident in their teams’ ability to detect when an AI agent has gone…
The future of AI security research isn’t autonomous, it’s human-amplified
Meet HTTP Terminator, a new AI system that has identified hundreds of websites vulnerable to HTTP request smuggling, hacked them live at…
OpenAI says Astra could reach ‘critical’ cyber capability, tightens safeguards
OpenAI said its upcoming model Astra is showing cybersecurity capabilities that could reach its highest risk category, where a system can autonomously…
One-click flaw in Atlassian Rovo exposed enterprise data via prompt injection attack
Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive work environments like Slack, Microsoft 365, and Google Workspace, was found…